{"report_id":"65311d98-768d-47ff-84a6-102bb41b2b2a","version":0,"status":"done","tags":[],"date":"2026-09-27T14:50:23Z","url":{"schema":"http","addr":"yuye1.top/","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":0,"asn":54801,"as":"Zillion Network Inc.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"yuye1.top/#/index","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"title":"TikTok","dom":{"size":131321,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41045)","md5":"5110e980493a01ed819679e6fec8d883","sha1":"c31cfa283cbffdc40389774c91a4697ca80c212c","sha256":"3d39af1da3212ce0166cb029adf50d5bbc090bf65d9aace96f26045fb843c054","sha512":"29f7d7c31f43cda744e8d5d864c4f254319c822e5f8e41a74c5bc845c638a7a565d45600299affa72433d62f124e072b6f38d60d574d62c9d1397fb1c18cf380","ssdeep":"1536:s/d+aPK0ddn/ddnQ7KrksZQu6CiX92rIn9ub/p790Olbu7XMgd/JTZUSfF:e+ajHyKrksZyrt2rcurpju78uViSfF","tlshash":"c2d35cb18122356b02278fd1f435674fbee7934fd963881097fc878e6bdec909929486","dom_hash":"domhashd8c7a19fa6b996db6ffbfaf48c500e8c","first_seen":"2026-09-27T14:50:40.486233Z","last_seen":"2026-09-27T14:50:40.486233Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yuye1.top/","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":0,"asn":54801,"as":"Zillion Network Inc.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T14:50:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cm96.pages.dev","ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-08-28T13:07:34.872341Z","last_seen":"2026-09-04T15:51:58.773541Z","alert_count":0,"request_count":1,"received_data":15206,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hetao-shop-test2.s3.amazonaws.com","ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-02-05T11:15:08Z","last_seen":"2026-09-08T08:13:39.984607Z","alert_count":0,"request_count":5,"received_data":536552,"sent_data":2855,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"hetao-shop-test.s3.amazonaws.com","ip":{"addr":"16.15.199.125","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2023-09-03T21:04:43Z","last_seen":"2026-09-27T13:01:05.136394Z","alert_count":0,"request_count":2,"received_data":572,"sent_data":1138,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"yuye1.top","ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":345,"request_count":69,"received_data":7805996,"sent_data":34074,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"argos-shop-online.s3.amazonaws.com","ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2023-09-03T21:04:43Z","last_seen":"2026-09-08T08:13:40.062683Z","alert_count":0,"request_count":11,"received_data":2926,"sent_data":6282,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yuye1.top/js/app.17917eaa.js?v=20260908-withdraw-chain-switch1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aa667bb45897adcddcfa9d745bf21d2","sha1":"9036095449c3072877c208a6ef2cae4b4ca673ea","sha256":"5b3c616b54eb299a15589d081d3cdb4004d44c0668723ba8b990bb2577d571f3","sha512":"f4b6728e929430124a0d03611d43c0ea2249824d5966f2ddb97192967a96be59e8e58fb0a3be1a9ac6f64649756377225e9d080980da6c4bb952e6e3158fda14","ssdeep":"24576:wIJO8ObPhgyMU9awQovEtLzv9HxIUKO73Ukx95/+4s69TEssfB9Lqb5xP7BniwXP:wIJO8ObPhgyMU95QKEtf9HeLgkQR+VGD","tlshash":"47658eee67da77fc0c585646a04f7a75319c1cbafb95f0e008ecd61921e9d818213f2a","size":1421990,"data":"","first_seen":"2026-09-27T13:01:17.563803Z","last_seen":"2026-09-27T14:56:36.198983Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/chunk-5c108c01.903c5a5c.js?v=20260905-directwallet1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a2458f88144339cded01523feb5953","sha1":"c5ee5def93aedb05efee088af8948760007273a2","sha256":"375d53cec8cf7376d5cd38cdd544ff7b2093b6b411885f32e9c5d1bb2913cd19","sha512":"25beb27f67d539458952849dc85a2184e4033a1da2582df9b56cfc3bad3ed970d928019af741912d3ac83309d86107c0b70a8209441100c8a3a1ed25913ce2be","ssdeep":"192:exYZCje9tFhsH1uHmLDpYTgXitSNFMOGrddxq/cictjAfNeNF/BPsGCQ:e1e7FhsH8MXBNDcqmvPH","tlshash":"bc5295e6c4b0a4bd495a82722045f1e0f7653a28d102514ffb7cec9a72ad824333e77e","size":14102,"data":"","first_seen":"2026-09-27T13:01:17.515027Z","last_seen":"2026-09-27T14:56:36.158146Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/chunk-aec92c58.0700a032.js?v=20260905-directwallet1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee7c90d36ce3274e2c8aa75440792a7","sha1":"0a86e1089a197732487f52c0b3ddba4942697074","sha256":"aae1cc251b44a378d549539278d61148719109c6de43578cf0202aa5c98346d9","sha512":"f38877a66ad0778988f9e8a5301abfc3426ed923d03e6a04d04b1776a4bf40f3a0b752125593b3204bba3571a46597c71f76cf02f4a197cdcaf0c059ff6c0889","ssdeep":"384:bqDsnNXqoCdUHD3VnT0UBEDKalA4fMPhu/QeSYHWvzghY/Xh+O6alaSX9ikFO9:H6oXTdBEDU8/CYnY/Xh+PalaE9ikFO9","tlshash":"f0d23b535480b87d8a936256340f2299ba363f85d446cc96b53cdce9e2bed30371bb2d","size":30685,"data":"","first_seen":"2026-09-27T13:01:17.471099Z","last_seen":"2026-09-27T14:56:36.158988Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js?c=RP37GMYA","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","size":14449,"data":"","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-27T14:56:36.164106Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"13eceec2d0735c81ea6a3405e5ea8e97","sha1":"b26b3e2a56d26f9e2be389bff0f6c8c344766c20","sha256":"f8e91cd6f11cc62d043f57c45f7b6e165db1024d18fb42e7902cad7305f1a2a7","sha512":"af9e480b032fe491ae855f020a7d97ab8c96adffe3595dc678ea94263709745b8cc2d3565bad9eb985ab877139a0e8b1f15d5201b5292ba22ced5f4152b1e5b4","ssdeep":"","tlshash":"dd2186f1302770f7c74217b8683f5715ae2b163b6c09e3d28d0ed64029a8e92403357c","size":1387,"data":"","first_seen":"2026-09-27T13:01:17.561138Z","last_seen":"2026-09-27T14:56:36.199568Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/vendors~app.0e39b911.js","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"65d6db148a3b6e96e6553bfe4e7931c1","sha1":"786fd1c8ffa2cbcc0ac6a8b98c227c702bec4287","sha256":"7ea7b5f5d7aaa5eadbb9560c60a6fd283230b700311a536d310a94f83c141c28","sha512":"f2fbe76dd514533300f42140ee4cf0f528a9c2fd749a10c1600450b263f674307382457239f18136cb2daef53fdf4a84b6536c09b3216c60d509f355fc59524f","ssdeep":"49152:+Z/k5X0wZv2nyC4ZOqB/jM7U0/FlmrVzjfCRSTpJoIdbDCEfZ9T:s/INv2yCuHBM7U0fmr4e5CEfbT","tlshash":"cbf5b35c364af340915ad0e7e43b3c49d26ae589a40b00d47f7187f31eb574ae3aee26","size":3534882,"data":"","first_seen":"2026-09-27T13:01:17.562573Z","last_seen":"2026-09-27T14:56:36.204897Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/outdoor-sports.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.129Z","timestamp":1790520589129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/outdoor-sports.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-80a9\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32937,"size_decoded":33077,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"b0f01775a9dd0ba16a54b8a92b6acb9a","sha1":"21a1f819bc3f271e2e5d2099a851bd845a163324","sha256":"2a2f63a4cc98d64fddd2fe356e1a2bf2478102afff1fad09e6a37e3475b8ec79","sha512":"c429bd8d63bfcb8d45f66a0985d7a3968dcfa0619daefbf99611930528e7e7ec87c9b42c86fc8af51684d1a4fc59474fdc0069a2cc1fead110fc81e70d9e59b9","ssdeep":"768:qx7I+Q4P0aAMSLyQ4qo0ZPYGozPRqPqtUhG+:qx7IjAxAMS14KCzPRqytGZ","tlshash":"7ae2f135fbe5f116c5064af2322835a7618b7574df282777cac59028e0b8db8da342cd","first_seen":"2026-09-27T13:01:17.478562Z","last_seen":"2026-09-27T14:56:36.175162Z","times_seen":3,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/mens-bags.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.136Z","timestamp":1790520589136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/mens-bags.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-4df6\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19958,"size_decoded":20104,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"a38f9bf901a65bc4aed890db9f4ac9fb","sha1":"ebc4ee8bd747e1a9466a15fdff2ba0eb2dd65eda","sha256":"364cf080db5af61b095cdafc48f22cccfaf82e7c4596f4ffb69e50ae16ab1134","sha512":"1708a9d922616332c21b04bae3f4050689b0d48bc393120a07b59b68f52c0307cd3c8abd10c86de969524db5e20655bb2a3a6e703c2b34423234090fc2a42260","ssdeep":"384:q81Q41kJ0Tib2H/+CKeFtguzI6qlNk6bSmTQeL6OCiJdv8SffmWN4:q611TVH/+1XuzI6qlzSmT96OCicSnT4","tlshash":"3f92d0d4f4b0160349136c3785e82aba82edc95ce7e6ff18a2614725ba4caba1dd1c4c","first_seen":"2026-09-27T13:01:17.475413Z","last_seen":"2026-09-27T14:56:36.177171Z","times_seen":3,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-21/a5b316de-9750-4c11-90ff-6513cbbb14a2.jpeg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.237Z","timestamp":1790520589237,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-21/a5b316de-9750-4c11-90ff-6513cbbb14a2.jpeg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587WMXR0KDF1MB8T\r\nx-amz-id-2: SzP3LPhBekgZ0FZWDabvmwuNbxJ+YWViib3s15gLaqAYGInfT7saxPSUEl+smhReuHx+1v3NONA=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right1.ea8f0c33.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.388Z","timestamp":1790520589388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right1.ea8f0c33.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-1519\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5401,"size_decoded":5623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"ea8f0c33d3900db3be98c332c0c2062d","sha1":"74ba33afcb75c6a95340f43617a273b8068689b1","sha256":"a4b10be0e88ef341a10520d1489dc02f3898c5804bbe90be6a94bb872b7a8a76","sha512":"fda39ead697cf13e4b4f116a91437f276a61266920c6be868fd31fc50cbb1f0f50d64cf7c44851794ae7313aa8eea47a842d96101ef7868fa691d212ac34b006","ssdeep":"96:WwDlVF7N/K3pYckSGRTT+PS6rIqVUhfvvbzZr/wbSCvG+9Lh7nAb2:VlVFZ/KSckS2TT+PS6WpEm6Jt","tlshash":"9ab18ed2629df395ccea6bb19e8d7fb2660163cfbf210302a84102b654bcc8fd0514e8","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.168836Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cm96.pages.dev/boot.js?c=RP37GMYA","fqdn":"cm96.pages.dev","domain":"cm96.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.523Z","timestamp":1790520588523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm96.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 20:37:40 GMT","end":"Fri, 20 Nov 2026 21:35:14 GMT"},"fingerprint":{"sha1":"2E:51:33:E5:01:E6:80:F5:90:A6:7B:84:FE:59:1F:C4:16:82:F0:4F","sha256":"89:B3:C0:9C:05:73:1A:F9:40:60:D3:4B:FE:D0:B4:4D:6A:71:72:5B:DF:36:5B:39:6B:51:D7:78:01:60:20:14"}}},"request":{"raw":"GET /boot.js?c=RP37GMYA HTTP/1.1\r\nHost: cm96.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 14:49:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbMBN1IiaNFjTUnuyeaWLab76jd%2BYXW20IKXpstCp5KZ48xyymgkg0Z5tcmqCz6jWKl6ZZXM%2BGlqeJyFA0lSiRtPUwdLrIWiu92%2FAET54sOFn66Z5hLRqw%2BmUFZnSh7P2A%3D%3D\"}]}\r\netag: W/\"416b2396ec5ed3364b50800c87aa83be\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a41b512e6fa4569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14449,"size_decoded":5498,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"85d48ac1712680cf860f40382e5cfe5e","sha1":"fd7c934e50ad170227ce2a71336fc9ad882f96a8","sha256":"0823cd674423df1230152137e949cea4813f3886d82c7aedcee3f2dc0bcfe62a","sha512":"38756274a839e235e804dcaac0055d81d2d27f9f9b22e5f6e5fccb23da10a2456406bdceec1a2eb6733efada2a58d6018e79935743c438d1a4a94ed2b447f00e","ssdeep":"192:576QIQyQ/C2+Nnjt1m3RiQWJQjMhiuPvQsaL0xQgIB8m/HNdbUJD/EMIi0oP0dlc:57rA9mX4MdDdOgdhkR","tlshash":"f552859ebcd3b09647a3317c4abf9401b13ea113140cda64791ca550afb166ca77beec","first_seen":"2026-08-28T13:07:42.394437Z","last_seen":"2026-09-27T14:56:36.164106Z","times_seen":30,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":85,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test2.s3.amazonaws.com/avatar/2023-11-27/19c6380e-1306-46a7-a234-79dda7f1ddb3.jpg","fqdn":"hetao-shop-test2.s3.amazonaws.com","domain":"hetao-shop-test2.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.222Z","timestamp":1790520589222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-11-27/19c6380e-1306-46a7-a234-79dda7f1ddb3.jpg HTTP/1.1\r\nHost: hetao-shop-test2.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dvd3dFC+jIi23cTgBGYde4zZTQzun89KINzSCeBPx0SQaxp2QSj6dlbvlltw1YBMIHJQAiWXSxk=\r\nx-amz-request-id: 587K7W9ZPBGZ2ZB2\r\nDate: Sun, 27 Sep 2026 14:49:50 GMT\r\nLast-Modified: Mon, 27 Nov 2023 07:09:25 GMT\r\nETag: \"c2313b7303225b3b2fee461c3cba8e86\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 54406\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":54406,"size_decoded":54841,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 612x609, components 3","md5":"c2313b7303225b3b2fee461c3cba8e86","sha1":"8b994f42c7ed8dc2412c283ef7b9da2e24aeacb0","sha256":"0aac09bb52414f093911679a498791ca6206764797fa9322728df3e6ad5511b0","sha512":"8453656fc85b4aff0c1b4a0577fb76521381c6023ef41177296239d83ef5870c5380922d97aec8ba98542e50f681522cd89d021086c6dc95c5d1f77bfb9940d9","ssdeep":"1536:a7eQWzjxh6DCfaQ/dHtC73Ak3LmPhACuUX+kEdbZ/ZArEeD73o3SsCNQ:aiZCXj7Qk6ACNX+7bP6Fv3o3BCNQ","tlshash":"6133f274ef38a81e7813a63e3f78c98913cce1d74616878adf560b522d3a6a46f10459","first_seen":"2024-04-24T08:16:39Z","last_seen":"2026-09-27T14:56:36.191399Z","times_seen":2510,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":32,"connect":91,"send":0,"wait":117,"receive":91,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test2.s3.amazonaws.com/shopAvatar/2023-11-21/1e184c30-ba52-4f28-908a-2e08494e5861.jpeg","fqdn":"hetao-shop-test2.s3.amazonaws.com","domain":"hetao-shop-test2.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.230Z","timestamp":1790520589230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /shopAvatar/2023-11-21/1e184c30-ba52-4f28-908a-2e08494e5861.jpeg HTTP/1.1\r\nHost: hetao-shop-test2.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ZmdJ0JqjCdeualz5GPnlJEBy/D6Cem5z68Rr67sNXQeFP6Sg205qWVE+ar8hSQSDkLlyy39RXg4=\r\nx-amz-request-id: 587QBWJ3RT9DJ276\r\nDate: Sun, 27 Sep 2026 14:49:50 GMT\r\nLast-Modified: Tue, 21 Nov 2023 12:14:10 GMT\r\nETag: \"6af0093b831a509a11efc0a69dc498cf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 34756\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34756,"size_decoded":35191,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 289x289, components 3","md5":"6af0093b831a509a11efc0a69dc498cf","sha1":"3bc87a84fd4fde1e2fdd74196bed8e203d8f390c","sha256":"9aa2763ee70759925b1f4ae71470618aebfcb081f8d63ac0a5aa09702a5437fb","sha512":"28b326e4a237675bbd0db140151e3e20aa8096dd7e57c88cbb9d2696f0f89f65f6ca576ba8d5cb5eb794cc6af3bf3a0fc3c7f9e20a04ca1a7840fcf7a46436ca","ssdeep":"768:pouenhlYXwAxycU+2Dn7bSLK4sZ4OfK89v/6iBs:poueXs/ycU9DuS1X/68s","tlshash":"e5f2f113d459f01a5480cb71cfbbe29dd3b0e6447778fe949bc970f695608a71848d1d","first_seen":"2024-04-24T08:16:39Z","last_seen":"2026-09-27T14:56:36.197214Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":24,"connect":92,"send":0,"wait":118,"receive":91,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test2.s3.amazonaws.com/avatar/2023-11-07/42e1eb73-13a4-4a53-9984-7ee0be2fc222.jpg","fqdn":"hetao-shop-test2.s3.amazonaws.com","domain":"hetao-shop-test2.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.254Z","timestamp":1790520589254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-11-07/42e1eb73-13a4-4a53-9984-7ee0be2fc222.jpg HTTP/1.1\r\nHost: hetao-shop-test2.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wTq/W0oYo82uTiHbP92KbmqCPhEz/4P/HvZwCXS3I8eQdQiqj2398nwDqg2FkVvhBUNLN9ElNQM=\r\nx-amz-request-id: 587P1ERXKFPHBJWK\r\nDate: Sun, 27 Sep 2026 14:49:50 GMT\r\nLast-Modified: Tue, 07 Nov 2023 06:12:14 GMT\r\nETag: \"6d6e67e8bd9678f3ac633fec6f9ffebf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 321506\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":321506,"size_decoded":321942,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"6d6e67e8bd9678f3ac633fec6f9ffebf","sha1":"04c42393049077a43f73d59e56b0792275715f8d","sha256":"e46eb77190ef9026f77e891d703b20b76105d3b59a9c9c442d0fbea72e6b67e4","sha512":"9db0aad9dfe69519c71c3bbeb79fb2fe406c68ad1cd21d8a2ce15bce5cd12e245daa820d96b5647f5ab367385069e1a9a918371249bbdcb39f339947f3894145","ssdeep":"6144:/8TLLOF2S3B4l+jKl2fWDQz/PArtwi1RZ/3zMy7Bq649YLtj+xNZ5ansKIVx:KLYxym6E/KtF1RZvzMiQ9YS5amx","tlshash":"936423c5dba4ee4061c7a7e3c22ec29c943bafb1c886d31e78479e564977be1d264130","first_seen":"2024-04-24T08:16:40Z","last_seen":"2026-09-27T14:56:36.177967Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":101,"send":0,"wait":126,"receive":296,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/css/chunk-5c108c01.6863d921.css","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.206Z","timestamp":1790520588206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /css/chunk-5c108c01.6863d921.css HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-19c8\"\r\nexpires: Mon, 28 Sep 2026 02:49:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6600,"size_decoded":2034,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-09-27T14:56:36.192046Z","times_seen":5447,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/55080912-43dc-4b0e-9011-ca007581a20c.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.256Z","timestamp":1790520589256,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/55080912-43dc-4b0e-9011-ca007581a20c.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587Z9NS0QTQMYP63\r\nx-amz-id-2: Una+lQI6r326pyqK9/zJxA8akGmedRO54PdZM7PeGjpspZ0W2Dfyg7fK4AwfDMjVDGaA/S0qU/4=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right6.9e96e0a5.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.398Z","timestamp":1790520589398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right6.9e96e0a5.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-162f\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5679,"size_decoded":5861,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"9e96e0a5327460f149797cf3aed1d2b3","sha1":"5a4141fa427be4f0fbdfc63875b4d34dab06211d","sha256":"9c729f94f92f750b76eb654ac4520b79661570d4f00b3b1fdb9b2423bbb3675b","sha512":"d81b0fb19daefd4e8f9738c2a805f762dfecdeccb246fc4de1d462edee9599187ac994f551b6fe74447e3d8400d56ac6e5408fab4dfb1d068e47cacfb90592bd","ssdeep":"96:WwDuVj05SZpcE6bIIPMKmm8jSQ+im3sboRaYKoOqSos2NsSVJPRcL:VuVjtUEaPMKmmeA3sERzar2uSdeL","tlshash":"55c19e46d39fa328ecfa2a37511f351ab3661a0728eefdc219e21c58e65114023c9d7c","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.161244Z","times_seen":1966,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260904/home-carousel-shopping-20260904.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.102Z","timestamp":1790520589102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260904/home-carousel-shopping-20260904.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 10:19:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9a9b39-27e32\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163378,"size_decoded":163495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1396x620, components 3","md5":"8840b074e47c63de0731b30068168126","sha1":"5f3f911a38ca2c3088dbe0a1b46a75670f78b0c8","sha256":"046e6dae4401554b7d9938e93746657c593bbd2b7e8e1b62a232aa1cf03208ed","sha512":"c867dd80ace3bb34f63de6f379d9774263954ecc44aa415521a9de86be5551f5e62dc64b837ff0382436a8b9f705b4b059b21c433125d6fe7f19815f967cb4d3","ssdeep":"3072:kj5U3O0W0KaVNwaijPdcTNAy8M8uVZNb4onE:k5AOG7wRj4eMXb4v","tlshash":"9bf3123ef823e5f719ac326e050618cfb9c8429ea93c42b785f4555c3c09c46e87e6b9","first_seen":"2026-09-27T13:01:17.509904Z","last_seen":"2026-09-27T14:56:36.196585Z","times_seen":3,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/snacks.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.122Z","timestamp":1790520589122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/snacks.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-9025\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36901,"size_decoded":37035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"c4d5d7035c8fcd4edfb938a44b1feab1","sha1":"e05ba15fc5b13cf8e03ccca834dfd52d24879250","sha256":"57c5603a7927499733bad7f71e06c90e2b97dc2762caca7747f4af5069b9736a","sha512":"6c966754dfec9cd59556cdf01fe253a08f33cb686bce580028e5b89258db3c95df07b8b8a8188a01b1e88a77c4112017ebcce546a4231a3cdbb6a5f66ffebc00","ssdeep":"768:qs7xXyAK5oT3oWP3mSA6O52WB5IqRWFJ3xbEUhz3d/wlihCQ8wFbjM7:qs9QojoWPWSqoaIqsFpxbbhTNfV8p7","tlshash":"3ff2f127c253449bce8c0e35099902176defa9aee9b40921e5b5edbc8c20cfcc54a3a5","first_seen":"2026-09-27T13:01:17.473605Z","last_seen":"2026-09-27T14:56:36.197684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/images/seller/20260905/mother-baby-store-20260905.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.227Z","timestamp":1790520589227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /images/seller/20260905/mother-baby-store-20260905.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 04 Sep 2026 18:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b108c-4e476\"\r\nexpires: Sun, 04 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":320630,"size_decoded":321095,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"7cafafb40d4166b2a11a5615c65599b6","sha1":"14288c97e0bc09d3222e8c17d84762b96fd26f75","sha256":"3ad507182bbbf14b0fb32a9b8098c7642311eec8d3cddd452c7e0cb48f666bf5","sha512":"66ed3917f73b41ec94860a2127ee42e11f38938c8f3bf88479f76e371f07a8a64b9d7af14666800280f69a84ea3ff79ee0b3a6f6861115b3e06229d077ff06f0","ssdeep":"6144:UpBqVkC1L3rN6kdgI83/iDkCgIAo3sln3fkutpy1tdnx:Uqh1VJdgI8aozvCsRfk6Cx","tlshash":"4f64230e68b51c40e69b49535628e20c67f87ebe332794ac59832f13325b835bf7c6c6","first_seen":"2026-09-27T13:01:17.50596Z","last_seen":"2026-09-27T14:56:36.184476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/fonts/element-icons.535877f5.woff","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.698Z","timestamp":1790520588698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yuye1.top/css/app.3d130ff9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\netag: \"6a9858be-6e28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28471,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-09-27T21:06:04.928519Z","times_seen":30200,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/phone-accessories.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.124Z","timestamp":1790520589124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/phone-accessories.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-5894\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22676,"size_decoded":22797,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"8a6c3eddb9e900020594473aaa5419f1","sha1":"1043af288df8b824185d78b4c32760ab9a2e0e5b","sha256":"ee5ad479b2b0f5427006f97e7b754ddff3bc598122e87db05f4a00c463aed9e6","sha512":"389a4ace1796e26696a8abebaa01e0a939a40d11a50b533ab5590db948c66c507d0099f04adeec700d0975776bc5a1f5c08182c696768d79cf6034df6588b5ec","ssdeep":"384:qcfOl25UND/NFQfK+XatcR1bNicTitOq3/13RGp7OvbAqc/jSUq55SezK:qcfMNND1szbUcTikq3qpGABjSU4kZ","tlshash":"02a2d026da8355f7e88f30f9dd2014dda5af385fdf689ab4743a1326a920cfa104d41b","first_seen":"2026-09-27T13:01:17.541623Z","last_seen":"2026-09-27T14:56:36.170804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/protection.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.125Z","timestamp":1790520589125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/protection.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-43bf\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17343,"size_decoded":17460,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"8812df5ea25ef44e5adb05e41716ce91","sha1":"ed0f5d10df7855f345dbd00d8f83bf8037d23d91","sha256":"a44781b1e92edfbe4aba7d4587ff50f53a879006cb19a318acb02d6e04218737","sha512":"b64266d946e6e7868c3f9f78d5f40a1987666b531e07a617e5c46c433c3cedf68b08d53bf10a1e75cdb996fa5986aaf8725f9d13f4df777a5ce4124e493ce057","ssdeep":"384:qJ9YJkBBiB9rtCI9vne4Mo1wz/YgdikIRBszi1kmZNYReU:qJ9YSLM9g9Bo1Jo91AlaRj","tlshash":"db72d1b1ef50d539dbd118b3eb8841a3ce49d600e39426d075b272d9dafd6e08b8b11c","first_seen":"2026-09-27T13:01:17.560025Z","last_seen":"2026-09-27T14:56:36.153898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/chunk-5c108c01.903c5a5c.js?v=20260905-directwallet1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.209Z","timestamp":1790520588209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /js/chunk-5c108c01.903c5a5c.js?v=20260905-directwallet1 HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-3716\"\r\nexpires: Mon, 28 Sep 2026 02:49:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14102,"size_decoded":4739,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14094), with no line terminators","md5":"52a2458f88144339cded01523feb5953","sha1":"c5ee5def93aedb05efee088af8948760007273a2","sha256":"375d53cec8cf7376d5cd38cdd544ff7b2093b6b411885f32e9c5d1bb2913cd19","sha512":"25beb27f67d539458952849dc85a2184e4033a1da2582df9b56cfc3bad3ed970d928019af741912d3ac83309d86107c0b70a8209441100c8a3a1ed25913ce2be","ssdeep":"192:exYZCje9tFhsH1uHmLDpYTgXitSNFMOGrddxq/cictjAfNeNF/BPsGCQ:e1e7FhsH8MXBNDcqmvPH","tlshash":"bc5295e6c4b0a4bd495a82722045f1e0f7653a28d102514ffb7cec9a72ad824333e77e","first_seen":"2026-09-27T13:01:17.515027Z","last_seen":"2026-09-27T14:56:36.158146Z","times_seen":3,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/fonts/iconfont.0080bb9b.woff2","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.700Z","timestamp":1790520588700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yuye1.top/css/app.3d130ff9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\netag: \"6a9858be-145c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5212,"size_decoded":5483,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.193659Z","times_seen":8194,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.783Z","timestamp":1790520588783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5908,"size_decoded":2456,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f5c45de5e4f509c127bcbb4779ff0626","sha1":"cfd904f634cb459215ac39715a4b914310946ea7","sha256":"729e7246d0e2ed3f259284597efb0cb2ea5adc325e123287b15998a1ad6a959d","sha512":"d004d354abff962f742df82d44d337780ce38dac6056a8718f2d6a0935dc65a5f588dd172281d95a16b511bac6410edb2ee9b8ab7b48c09ae3c5821eb3f35510","ssdeep":"96:bIYTaJuM0gecKmeUVIBLJ4f8wupNtup6DkZsknuCJ15ET+WkT4BRudbeQX/tbAHS:fTirpw9JoTW/up6DkZs7GsH+Cu/Vw4j","tlshash":"acc1c722dbc8213017d645e4685f7f53e1bf014b2a67cf88996ccf383a2c161b93366a","first_seen":"2026-09-27T13:01:17.503484Z","last_seen":"2026-09-27T14:56:36.182194Z","times_seen":3,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/banner_01.ad0364fc.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.147Z","timestamp":1790520589147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/banner_01.ad0364fc.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-14b21\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84769,"size_decoded":85146,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"ad0364fcce3be4744a03491594618893","sha1":"53af5fc779bad27dded7bd0fdbcf8e1311bedfa6","sha256":"c7e3261548b2edb52aa4a2cc4b54ac23070a13206152e57572bd5b93cacc1c1a","sha512":"cd1e76b3ce0829237d212891650caf80f20b24330e5ba58674b0550eec6ad42f42eac9e328c453c007aaa9deb6209949ca5f5c2d45960c1965545b3eaf415867","ssdeep":"1536:bHkJp0iR8hwwi8qjG6dwlX9oJF58qAkGTD8MrjDbdUtzRzwtPtkzz0w0W8stcM/l:DkJuO3npjXWNoJFuqPGvNXizo2bYEQQt","tlshash":"748302a0bb4cf54aa07a1053722c69160e5b01febcfbed7c06152af55ce7eb369c1609","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.190253Z","times_seen":2082,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/0a654302-766e-4f6c-a080-77480fd2d67d.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.253Z","timestamp":1790520589253,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/0a654302-766e-4f6c-a080-77480fd2d67d.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587XMFKD4JGKPKFC\r\nx-amz-id-2: 0L9jDhlYlPI9HM0X69SM7qXsESgncCGPk47k8IRdFJDLDU/ozypUSYSumNHo1mZVqwPZjyYXGyc=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.777Z","timestamp":1790520588777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6715,"size_decoded":2596,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"48230b281befc2cf6c217abbce03b445","sha1":"d4db1ad81cd16f2bd7500e9b0b910ccf06c73e98","sha256":"1a27bf147364ae6bd16e61edb536cdd315c684e413bc1e3681b3457cfd976951","sha512":"dc03e6e43c70d9c1deaccdedd27acc09be6f5549986ff49bb3d79779d38036638ec2bef69b2e24564e61f2421a3a190a51a43ef9bbff7aa98338f54e389e961b","ssdeep":"192:5VaTczoHOo3cl1BWs8xHExVRbQK0aCUfgNUbcxtnuI3rsQmxG6wEAhxpHPUPqCxj:5VKa8kbf8tEPEbUf0Txtt5ms6wxh4ZQo","tlshash":"9dd182adefac7cae478081e015c218dfe8a4b16bcb977dc440feef8446a9256003e534","first_seen":"2026-09-27T13:01:17.549257Z","last_seen":"2026-09-27T14:56:36.149533Z","times_seen":3,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-21/d1abc8d4-a966-4870-a143-b1f7d2116070.png","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.239Z","timestamp":1790520589239,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-21/d1abc8d4-a966-4870-a143-b1f7d2116070.png HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587S5KCH409SFRF2\r\nx-amz-id-2: +34DxvCVED/4S0WKGdobCBJ/LcBTVPn/HuUAWEl6HpCitkr2zPGYuXcCyjgXKOSwt+KeH6Ae/TY=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.776Z","timestamp":1790520588776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1127,"size_decoded":693,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a71afa494ef0212b814b111b9849aca6","sha1":"5a126692c1cc6b8331120a0ddd44d1c01cf67420","sha256":"a5ffc880990bec91a0858045ad51a5d0a80c881f9a9854be4ec79c416b2e83ad","sha512":"69f46ecfd7f22e2228b94a3fbed465ddfc552a671b8348b40b3f756cf4837c3ae8450a7e0fb927e7a1072580783f8d25e1266cc4066afa338fd0e2390f91d2c8","ssdeep":"","tlshash":"f3216e461fd8d0690d0873c2c9dab091d27c774f7da4ad59d09bea1c0a6993c151eb26","first_seen":"2026-09-27T13:01:17.533936Z","last_seen":"2026-09-27T14:56:36.16805Z","times_seen":3,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.794Z","timestamp":1790520588794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":373,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-09-27T14:56:36.156136Z","times_seen":6262,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/fonts/element-icons.535877f5.woff","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.972Z","timestamp":1790520588972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yuye1.top/css/vendors~app.3bbfd8c1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\netag: \"6a9858be-6e28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":28471,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-09-27T21:06:04.928519Z","times_seen":30200,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test2.s3.amazonaws.com/avatar/2023-11-09/c91ba668-dfab-45bb-aa0a-3da0c51bcea4.jpg","fqdn":"hetao-shop-test2.s3.amazonaws.com","domain":"hetao-shop-test2.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.259Z","timestamp":1790520589259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-11-09/c91ba668-dfab-45bb-aa0a-3da0c51bcea4.jpg HTTP/1.1\r\nHost: hetao-shop-test2.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: E5XjE0HpN2WafcK46GyruC67gTCSvkWzHGSg5S1yo4bFjxMlmKkljF7jAeQCis+mS8JIHL+Sr+o=\r\nx-amz-request-id: 587GHH7BAM13ZJH8\r\nDate: Sun, 27 Sep 2026 14:49:50 GMT\r\nLast-Modified: Thu, 09 Nov 2023 07:44:26 GMT\r\nETag: \"1462e358545cb821cbeaa45af5e348a7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 10354\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10354,"size_decoded":10789,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"1462e358545cb821cbeaa45af5e348a7","sha1":"006a0eeda10263f0d06c4ea385878873e33b013d","sha256":"4aa44b79ccaea4eedd06125ae12b9e0939682f73db39438e7e86d88f3652b88c","sha512":"8ee31b278a6fedd17cbb09c9a62cc7d05f2aa16f94491d6925fe7481b6d83ed4caabc2d76eec150a3050c40bbf0db0ef72aff68568022d2d5519c01b38ea3eb7","ssdeep":"192:VgNuYUf9gTGzcScUirTIVCtl8q3jKGK7v2FYb4XNKnzynuWz7rEn7O21Ind:VKuNJC/rKjblSQSuInd","tlshash":"6222af8ff34ed703d5e04930456c3265cfb47e0485e6732369f1ab142f14c878a61a6a","first_seen":"2024-04-24T08:16:40Z","last_seen":"2026-09-27T14:56:36.157548Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":94,"dns":2,"connect":93,"send":0,"wait":121,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right4.d4ec046d.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.396Z","timestamp":1790520589396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right4.d4ec046d.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-1465\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5221,"size_decoded":5365,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"d4ec046d8c25c5dee52c5af662080f75","sha1":"896fdf6b222c106b1d020d0acf31ee9c26c88684","sha256":"99f6a1f7108f1abf56f20cfaa1a2186185f75dd1c2679ab934dfcc78a24d1a46","sha512":"8154278b83fc24b0fddd51d9b2cbd209229d8e7469f2f1871f76ab2194aea26e95e65f3d54273d72573ffa0a0f23ecbaa85b27582a48a345ba1889e96c125fb3","ssdeep":"96:WwDljepRFJvH6a0JgVZYW4OZRN/BF5Dl46b6OzaXg4s0uoTU61j5Y:Vljep7h/0GZf4OTN/LfHvzaXYRoTS","tlshash":"0ab14b325beff38de1f34634096db2056d5afe1392a15bd385d15ca060652afaea1180","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.148706Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/seller!list.action?isRec=1\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.789Z","timestamp":1790520588789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28027,"size_decoded":5933,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (27583), with no line terminators","md5":"e51d1b526707f83e3038a417a1a21f87","sha1":"a2047c7e833025b292864a2943770d74c80297a9","sha256":"220d7e31af3a1d1834e5e12b9e404ccd3378ae9a925df20478a2d2d64d06faff","sha512":"94ec4108efc3d4fec8d6fca42f6c25c20934ee45cc5fab3886da723d68190543aac5e99faa889cd05da85611835495975768adaabc28bbaf6d4c84ed8d9603ba","ssdeep":"384:5qxICmIBGICHKTCS0K3C8TKvC7KaCNBCAKcCaCv+CUqCuCj9CMeIjkKIsCF44Cnj:5qxrTdatH","tlshash":"adc295a55a983ef1575d0f532c077e8ac5ac064f2e838eb1da8ccf0526f8bb5671e520","first_seen":"2026-09-27T13:01:17.472395Z","last_seen":"2026-09-27T14:56:36.15961Z","times_seen":3,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260904/home-carousel-home-20260904.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.106Z","timestamp":1790520589106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260904/home-carousel-home-20260904.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 10:20:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9a9b67-3c5ea\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247274,"size_decoded":247482,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1396x620, components 3","md5":"a108500d1cd8188bfe0e2c93b6193a46","sha1":"c5da28b71ef069b69401878e4270e1122d3bba06","sha256":"807772c7df86103f03a477558d21f67dc578e7832397cee8e46653e009f0f31c","sha512":"5b0b00545251698ee7a8f83cc8d5cb9e2e54babd4c45c33f0211ed59d9c38d9c3098d6daa354aebe423473b2b4d00b01bcbf47900c7204bb8c28efc7d9d58c34","ssdeep":"6144:Wa6FUVtBcsa62L52vu9lCSprZmvFYiPUixL0iqBIiV:i8tBcsyF2W9lCSpGVPvxL0fjV","tlshash":"23342397834b8b5aae759d28311bc6b27ed38f34274044afc1961099b93ce14fb24fd6","first_seen":"2026-09-27T13:01:17.556368Z","last_seen":"2026-09-27T14:56:36.176499Z","times_seen":3,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/jewelry-watches.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.133Z","timestamp":1790520589133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/jewelry-watches.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-6d9c\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28060,"size_decoded":28222,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"8d419c120ffcd34edf24291957d7c3ad","sha1":"405a1a2e4a833735a6aa28c2a18b64c00b050f6f","sha256":"faea2cda1a82e13819999483e08687102ec363cfd16527b1366eee80f88357fd","sha512":"9fbe090546dc84bbb23723b7ec471ed031cb930c12081599baddbe5c768a734c21f43c16923018fca251e2f026d7249f6eebd50808b5d35d2a4fdb94ca19ba8d","ssdeep":"768:q4vcOyf2mo2UKiKofPEqJ2cPIfAlpACq3p:qTf2mo2joXP2cPNACq3p","tlshash":"84c2f11fc787c2f1ca40ce78e2f318528de8a84ec5914b66ff36690716556558c6fa0d","first_seen":"2026-09-27T13:01:17.557434Z","last_seen":"2026-09-27T14:56:36.150353Z","times_seen":3,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/css/chunk-aec92c58.6f1a9e85.css","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.211Z","timestamp":1790520588211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /css/chunk-aec92c58.6f1a9e85.css HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-3bc0\"\r\nexpires: Mon, 28 Sep 2026 02:49:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15296,"size_decoded":6907,"mime_type":"text/css","magic":"ASCII text, with very long lines (15296), with no line terminators","md5":"18c6ee186620ef9644f67faba2ce7db2","sha1":"1a27444facd3ceafd01e3d58d04dabc1ae5411e2","sha256":"fd64918aa7b26d9f032ced8b1ce54fc7c941a3686eae47f5787772afb03a61e6","sha512":"2a383b9aa381af2320724cb0929bf2f5653ab44a186fec7258f8bcf32b80d4ecab2fb2ec26c0c153a5383e270faf1388f1c8ca926a101d74eefba334adf57bcb","ssdeep":"384:eiCKMYOAsaOxlnseFS9o41+qFkV0vD5rw/CVFcjSq:eizHO3/d4EFaDm0FcGq","tlshash":"9c62f87370646a38b6f786293988948e7046d913c22783febd6a611dd4c72e35a7038e","first_seen":"2024-07-21T11:22:10Z","last_seen":"2026-09-27T14:56:36.187039Z","times_seen":258,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/womens-bags.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.136Z","timestamp":1790520589136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/womens-bags.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-446f\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17519,"size_decoded":17677,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"eb91adb3d105aca2d0354a5217addba9","sha1":"ca2ac256d2cf60a9ae8c030aa69abb2d4ffc5def","sha256":"57cd03f9849262ba5957e5e10a89170b0f72d39751edeb0eeb6531d0f4b4e8dd","sha512":"ac7b5c2dfa283450e127df0679a00feca8f41490dc292033be584cf06feb9fb3b8ed8675c221f621e0ee50034528e973b044f53fb0ec8fcf83f7510fe7d7ec1c","ssdeep":"384:q1qkS1twtJ8RQFoIImRgLUqZv49GSNDxqe83+gqR3Jd:qsT+8R8KifqZVGDxqe8yzd","tlshash":"3e72e168c61e9980ca15cf3320b3951c86d3efb0dcc58da268e7939c764c54fd8d7925","first_seen":"2026-09-27T13:01:17.525009Z","last_seen":"2026-09-27T14:56:36.171486Z","times_seen":3,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/public/showimg!showImg.action?imagePath=goods/20260903/17884151124072411517.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.143Z","timestamp":1790520589143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /wap/public/showimg!showImg.action?imagePath=goods/20260903/17884151124072411517.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8157,"size_decoded":7957,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 431 x 122, 8-bit/color RGB, non-interlaced","md5":"abf9743f6f99d96e06b256a88a5b1a41","sha1":"260846262ee071f9e0dc47468d1374515cd3707a","sha256":"bb60e2d5a9318f5ff28e92f3f3cfd7d358d03a1892bb74d8320d1a487ca2c2c9","sha512":"a353ca7cea5a02e7da73ab475da641cd75f08a67df734837e29e6974e9cf683a60ac0ba25c58be98c004c427f619469643e06d3eec155589114f4b5a28e24520","ssdeep":"192:2/C1fQbGs4xkz00P15oUvupoYTFyVNrjfWR:LDskkbimZ7jOR","tlshash":"37f1af83a651182913b7615640cb3e5a5e93fd908e8f0edf3b05729e4fac452c2ad3ed","first_seen":"2026-09-27T13:01:17.476928Z","last_seen":"2026-09-27T14:56:36.163233Z","times_seen":3,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.262Z","timestamp":1790520589262,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587HWMRKAHFRSTT1\r\nx-amz-id-2: 9vZXfQmSAUwkSih1ZJfD35iTbFnfh4XJCJc/hdf7kJWMrJfEdsYJxDyHJP1rw3EDUlFQ45amvtI=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/vendors~app.0e39b911.js","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:45.636Z","timestamp":1790520585636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /js/vendors~app.0e39b911.js HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-35f022\"\r\nexpires: Mon, 28 Sep 2026 02:49:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3534882,"size_decoded":961368,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63327), with no line terminators","md5":"3f459f18488ca4f7a949700f3d315b7b","sha1":"736513fb0e41dacbfb1e0cc5c47393bef0ddf1e2","sha256":"1616680049b0438771ed3752bc0e1552afe697aae56cfd3423e3cbccfc1b2c20","sha512":"4fcd82d9c5b9115cdf829076cb2836c5a9bb233cdaf61872be22005fb4effe8a43efeafdcb4ed5896070cf90847ee7ca2e0302e817bb9d8d775e9e0c78552cbc","ssdeep":"12288:wa1pSxHd8UjzKabwSsV9CU0VkEnWZv2IiyAh4Z5rRKqBjCCJpy:wxxH/kDVX0wZv2nyC4Z5rIqB/jy","tlshash":"71252add32c5b42243a36175003f290ba33b2959a80a8858f675d4dabc7d95e633bf7c","first_seen":"2026-09-27T14:50:40.512339Z","last_seen":"2026-09-27T14:50:40.512339Z","times_seen":1,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":988,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/stationery.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.127Z","timestamp":1790520589127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/stationery.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-586b\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22635,"size_decoded":22700,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"e5ff970b8db79a53a8c36f41af8bf08e","sha1":"df5f90d3d073148d1de25ddc3b4391e782444159","sha256":"14e278c1954de349425853cc9562f4a4eff5a36abe664f9173a8e1c314ebe2ba","sha512":"488fdf7cd0a1e4e2d1330d2434b5176d152d0e1ff84b50d28597172a074e2dd94ad04e3bc780f44abe9e66144bb354ad3c2d64d4f897e62ed4a0736b79541d71","ssdeep":"384:qLYXs+mBobax005IXKFR92n9W/eXYYj5/FavANuNehkXZpfVbh4jV1ubZT:qLY/mR+uIXk/eYYjfKANwXZpNgV1O","tlshash":"2ba2e0ceea3495c1eb5fc5f4d0338186721c7a20d6984a11bee1dfbaa10ca9c108d5fd","first_seen":"2026-09-27T13:01:17.504853Z","last_seen":"2026-09-27T14:56:36.19597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test.s3.amazonaws.com/avatar/2023-06-15/1a50c40d-e3b7-4a80-8161-6b85fca1cb33.jpeg","fqdn":"hetao-shop-test.s3.amazonaws.com","domain":"hetao-shop-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.125","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.248Z","timestamp":1790520589248,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-06-15/1a50c40d-e3b7-4a80-8161-6b85fca1cb33.jpeg HTTP/1.1\r\nHost: hetao-shop-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587X4MC1WMZTJNA0\r\nx-amz-id-2: 78Yj+TDaTiycyn1bs+6NhDVNK1k3yxkx7b/hgNdKkk+EGTmlfMjyQfSORDSD8te0LzQE41Xvg8YnDJ2uvUL5pcE3TTP9XMJZ\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/62e99ac9-6e29-49b2-b196-c8c2059ef5e2.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.250Z","timestamp":1790520589250,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/62e99ac9-6e29-49b2-b196-c8c2059ef5e2.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587PDWPQR2M43Y36\r\nx-amz-id-2: zp29gYCpn46ziJkAHE78hnqJp84DFWzgbSxcY4phQOKCDAayP9bUmPCLkAxQE3JiAb/8S2rvjf0=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right3.2623b6d3.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.395Z","timestamp":1790520589395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right3.2623b6d3.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-1853\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6227,"size_decoded":6440,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"2623b6d3fdcdc3cedd05dc18ae066b95","sha1":"87a496d16deb4dd95911f7a13d1a1aa1406ea0e7","sha256":"442cccd091f86ca0e04e6968e5b8d8a9da4d0cc44d5db7c13bcfc6e8dfe1c8e7","sha512":"875c70082bca2afd94f6aa97595c77812a9fd4d6619f09c71a7b18c35bee92b85ab668820f1d84638446c029996fe60b0d24211fe7a40e275338432e0ba78dc0","ssdeep":"96:WwDXOIcRS6h49YajeysjKSB6uBcHWSNihodeI2dqmbYjdAX1skAURqNmABBq189:Vlcb49e3j3L3tqde1Rsj+skAWaBQi9","tlshash":"6ed18e3127ff975ce0f635b7061d7a467751195ccaea70a1100c72993a78470a86d3ba","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.188348Z","times_seen":1990,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/matashop2.svg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.008Z","timestamp":1790520588008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /matashop2.svg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 26 Sep 2026 16:12:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab7eef9-231e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/banner_02.d6b5d57e.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.665Z","timestamp":1790520588665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/banner_02.d6b5d57e.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-4cf0\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19696,"size_decoded":19925,"mime_type":"image/png","magic":"PNG image data, 1200 x 297, 8-bit colormap, non-interlaced","md5":"d6b5d57e91118649b629bdccd2f5cfb9","sha1":"9542149662ebfda41c3705bafe13f5f97c0bc35e","sha256":"ca0d4bcbbb49be27f7d5b215f2eb91252fb7e57d8db3b5532144d7353605def7","sha512":"b6daeacdf2bc38dfb4d41d8646e6755751187890b818ddf709f91b2116a4b1d62dbc7d35fa81ecabf7ca014662c8c549fa1b1213bed45b8c8c5dcc23f25901d1","ssdeep":"384:v/sTzByfEwcog8O45N7B6H0N+WD9YNz80xBYK43eXfZB+VG:vE3BuEwcCJnVmE+W6PnYK4cQVG","tlshash":"6a92d09f64d480a906a6cceac915afb73952e471db90258054dace5b8e7091f023e2fa","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-09-27T14:56:36.182868Z","times_seen":1636,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/BankCard.fe6d8a7f.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.784Z","timestamp":1790520588784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/BankCard.fe6d8a7f.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-510a\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20746,"size_decoded":21121,"mime_type":"image/png","magic":"PNG image data, 237 x 152, 8-bit colormap, non-interlaced","md5":"fe6d8a7f675383094bcb7ddbeca29ca2","sha1":"b4a8355c1fd6e29d364ebaebc43016f0cb13159d","sha256":"5eb50155eeb25caebb785718835926778a954653dea34212c17a43bda4b851d1","sha512":"a72322aa2dbd6a83f8dd33719cf93db1448498cd840c3e78d0398ca406be1db1b5c19b09c257a09aa36add2668551b6a91b73b69670e52777cfc13c76f13e4a3","ssdeep":"384:hCyeMW9DXLcOvw8zoRXhqgx6YZtUUCzgvRhFZpJdjwjADPQpX8gjkK:xE4Ov+brsYYkbFPjwjOPQygwK","tlshash":"5392e1d12ab27b00b734eab9157b96ec371631881c58c93669bf0232fdea55c078b875","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-09-27T14:56:36.179411Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-21/018722f0-dcd4-468b-8911-7397500e4fe4.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.243Z","timestamp":1790520589243,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-21/018722f0-dcd4-468b-8911-7397500e4fe4.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587TBBYVX3KNPANR\r\nx-amz-id-2: Y8bId+MZqe9KaW4OhORbF0oqv0vlQ4ib3KCepqGXQozZXpl4LNvMS1dbBNzr8zsu7Mk5mvC0hV0=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/sains.045880cf.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.786Z","timestamp":1790520588786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/sains.045880cf.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-144d\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5197,"size_decoded":5572,"mime_type":"image/png","magic":"PNG image data, 158 x 30, 8-bit/color RGBA, non-interlaced","md5":"045880cfc7270ecb165676e0abf329b3","sha1":"55d6daad4a44d505e5810bcd2c0d41d0de6053bd","sha256":"eb30206c388d8831e4edd6ac9aa2cfd5c2bd9b6a5d0dd4efb35f8deead121a98","sha512":"c526b4afb86e138442fa342abf72392f804132793869107354f8928073deca9ec69d1c3f9a558464b1c7a406f778cb879530314b604e97663923449eacc39f15","ssdeep":"96:1S7jcDKgHxgxXE/fdHddRnNUE2vMt7r0vMNg9yYvr0HaYgV74QmV+:1SvcDTxgx0XdHddRGfvMtsv600QmV+","tlshash":"07b19fb361728efcb8735ddc91919ba1d56f1ba9a809f321439f64f0e1702e68903f51","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-09-27T14:56:36.164677Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.792Z","timestamp":1790520588792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":373,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-09-27T14:56:36.156136Z","times_seen":6262,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/newOnlinechat!unread.action?lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.797Z","timestamp":1790520588797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":348,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-09-27T14:56:36.193054Z","times_seen":8822,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.527Z","timestamp":1790520588527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222,"size_decoded":487,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eb928f7963c708a00aa0d81f5c75cc14","sha1":"201f911dd987e342a0d9fe43b9d447b8cbe585b5","sha256":"f1a96eb7886c759186a116a73f1ce64d06e265e6360e63b06e02be2e1b12957e","sha512":"9d3a509498cf0f39c8c818433c77212f52830e16a5713c5c5dfddd7e491a1e349ff2bda82b03c141dbe5739e326bb2c20558fee222c042c97afb46f372ed31bb","ssdeep":"","tlshash":"26d023e0155c7890c30b87c51bef31158d19b565885725356c5dded441343b1bd10d65","first_seen":"2024-09-26T02:55:41Z","last_seen":"2026-09-27T14:56:36.175883Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/index!download-url.action?lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.796Z","timestamp":1790520588796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":405,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b37252614b5f5bdef892843c318b4485","sha1":"ac5f104553d20193c06e7fce2d9ac48646969cd3","sha256":"a89a72b8105e8895b59307a6d311ff2970f9bda7f022edc5e59ddb0f7062bfa3","sha512":"fa4250d1a3ba602f34424a1e7f6cae1c9078574731a97f7d5ff233b2f283df9b7b534e0b667276ca5267eb84892f4bfcf537139e83d6a58350f2f915cdd987ec","ssdeep":"","tlshash":"85a002921b8b2986860712cc648c3504609f527759c0db519d48eb708c7a2b52800520","first_seen":"2024-05-20T20:42:30Z","last_seen":"2026-09-27T14:56:36.18559Z","times_seen":2189,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.269Z","timestamp":1790520589269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":392,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-09-27T14:56:36.147751Z","times_seen":7426,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/css/app.3d130ff9.css","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:45.628Z","timestamp":1790520585628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /css/app.3d130ff9.css HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-394d4\"\r\nexpires: Mon, 28 Sep 2026 02:49:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234708,"size_decoded":40203,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7cc7220e7d5a060f36ed378d646ad80f","sha1":"264a8fab1500496f56cbe0ffb7a7cd4617615bb7","sha256":"cd0033bd5ccb5fd910a47dc12a5567460682a4b2d200fa3f20b5268cffc36119","sha512":"062659a8fc19e6f45493f65b5bd4f2e2bc3727b06ebe31339c247c7a44e1529319754146f3a272deba61d4e2ccc9b7f06b33184609059d604ff757ce72c1afbf","ssdeep":"1536:9gqId3828Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOd:SFFJWTPL4Q+05q2pe","tlshash":"8a34b510db17217b222be66d75c0fa886f28c322d8725b7bfd95741ccae64891163e1f","first_seen":"2024-07-30T00:39:11Z","last_seen":"2026-09-27T14:56:36.162489Z","times_seen":260,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/digital-products.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.128Z","timestamp":1790520589128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/digital-products.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-49d0\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18896,"size_decoded":18974,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"acc7fb65d01983787c49e57815db8ac1","sha1":"6ab5c9eae4f3d199787f889fc1c81be6e050c623","sha256":"43a1d9a877b1d5ac60852ce3fe53ecedcab266a5b21e5623b447f4b948ba2135","sha512":"aeaf527461860c7ae8f2903e1b4e1a300cf405e517d1540b2421ef37c5e2c87cf5e7c12b30a6e62bc370b606a693a947a1a7b1f00b34f7213c8b11fcbf90d6cc","ssdeep":"384:qrFFFH4nbY8QHczYEBi2y2ETjLCArQnlp26VZrT0Lso4cCaxNHVYQ5shA:qRr4nsXHczYOETjYAooRCax1t","tlshash":"f082e0d8d4a14b1c69a0653d5a8002bebc2f569ff31b2f62e7d86a404e987c3ce504f5","first_seen":"2026-09-27T13:01:17.547627Z","last_seen":"2026-09-27T14:56:36.154718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T14:49:44.578Z","timestamp":1790520584578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 26 Sep 2026 16:12:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab7eef9-231e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8990,"size_decoded":3081,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5647)","md5":"a0abbba78e7b0863035631480fa45cff","sha1":"c7400f54303decfb8ec232134b2711e524100f73","sha256":"34da8430481f218f003522c7a13f4ed4bbf88606e68acc4ad5813a2cd926bb23","sha512":"faa4840e061069149f97ffd37b4c51e6bd15454b6898f677ec9752bf3de5dbda47a900a11aaca848ea66b74a7ee267e51350962593fa34456c67355818c21333","ssdeep":"192:StrajSiGcufJt2vDYbNVNtfK6GxLKpdeCoP:SdoSiCt2M3iupdm","tlshash":"6f025ff9da00608fe9f1ce879d29e72aeadb8c771430e050e25c944ecd68fd4416b997","first_seen":"2026-09-27T13:01:17.513816Z","last_seen":"2026-09-27T14:56:36.17227Z","times_seen":3,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":90,"connect":246,"send":0,"wait":247,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/computer-accessories.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.127Z","timestamp":1790520589127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/computer-accessories.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-689c\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26780,"size_decoded":26924,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"0c14260cb2b2e7159460c94f3bcf0437","sha1":"bbfeaa6e80464fc14438cf31e9876ca223545ad8","sha256":"b4b3d26308c8d267af976f931166cc1218b1f989e6cdb2064ba84e498fb4770e","sha512":"aa43db1adc1d808a081b6190e5800325d33b2dc482c6cf0667bd8c6bb1376caa5f5077f9839f47ab2f844eff64d1efb5ba95994ade46552b3eac0e648a4ac91f","ssdeep":"384:q08vmdVHW+OF3zTqWDXqI1c4Q/JeOP7PPNKAscyVAt4n0Av2VUH7SJ6o/BN53e:qJvmdVydKWDu/Jei7PPi8y0Any62BN5u","tlshash":"81c2f1c8d1e6605af6da50bed090b52e7967c069df345813cf684ed236d063e78c2e8e","first_seen":"2026-09-27T13:01:17.530363Z","last_seen":"2026-09-27T14:56:36.183374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/css/vendors~app.3bbfd8c1.css","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:45.630Z","timestamp":1790520585630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /css/vendors~app.3bbfd8c1.css HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-3caed\"\r\nexpires: Mon, 28 Sep 2026 02:49:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248557,"size_decoded":43081,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7f8d874a9f674b22136f693c3532de05","sha1":"5e53aebd161d6ef26300236547d409b1eef57169","sha256":"a9d93e19087cfbbf78832c7e245e7c8d41840729409ed3029d7f58394d9aaad3","sha512":"e85d92b7963dda0a1ef8c73aa8db75675dd65152d60b7752ee856ab5526aa46fddeb062257f0d1fa30638c477980f1a84a56df2fd95fa0cbae42edb2dc12642a","ssdeep":"1536:nM28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/eU:VtKw/27eDLL6ob6v7f65WCXkb","tlshash":"5734b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2025-07-22T12:31:53.132665Z","last_seen":"2026-09-27T14:56:36.18114Z","times_seen":135,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/mother-baby.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.132Z","timestamp":1790520589132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/mother-baby.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-5f0b\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24331,"size_decoded":24481,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"369899546ff86907148831145f6abb69","sha1":"70112dd7a5112f33943a8dd507408dd19c7911ec","sha256":"1bd8ec330a1469368d20a8c7c00cb2eaedd58711470547226cef90c09300fa83","sha512":"849ed9a75fca75b867f31b55b30663e035d464d03797e9cb6b41137abbce6cbe010a015122b05d69cf80a48dbea7a66968841d10a65fc9e2ea4a25e7ee5abfe9","ssdeep":"384:qkBJv1vsk+77v/RoaatneakEYJmdGb/fmZ44CurX6ilD6VrQtofX9kD9bEBGCg0C:qcv1mLmJteJEUtrmZKB0WkcX9kDFEBGV","tlshash":"8eb2e1edcee00379dc2243f865894075c2c996f8cf84d0059ca0ad7799d367dee45ad9","first_seen":"2026-09-27T13:01:17.550204Z","last_seen":"2026-09-27T14:56:36.187782Z","times_seen":3,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.799Z","timestamp":1790520588799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":415,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c4654fa4ff81d11b3c8d322ec628880","sha1":"080c15bfaa6d03e4ccdd092630344aaf1f003c47","sha256":"1f9573c145cceac2e7ec7273293953edd53fd282aca6e50acd9334f59f34a5fa","sha512":"61d2d5a60435f554ef05dcb0e1b1c47875ac6610289e4d3ea66013244a25a7b1b720d3927649ce420575cc00929d9350f519524350066508593ad659aacb79ed","ssdeep":"","tlshash":"b9a012009c155c150c03c244a84d260641c8210246404e180d041928017d43c21000b0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-09-27T14:56:36.15257Z","times_seen":5787,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test2.s3.amazonaws.com/avatar/2023-11-19/a1d35a60-4f42-4bf9-ab32-07966231188e.jpg","fqdn":"hetao-shop-test2.s3.amazonaws.com","domain":"hetao-shop-test2.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.232Z","timestamp":1790520589232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-11-19/a1d35a60-4f42-4bf9-ab32-07966231188e.jpg HTTP/1.1\r\nHost: hetao-shop-test2.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: azoSZywWMe6KBIzIQdF1JMmwVa8Ivzo/rS2t+HBkMkrhHS/YoDzpro7aXUWs6lAWVGWcx9agmAo=\r\nx-amz-request-id: 587RFSKN35YHBB0M\r\nDate: Sun, 27 Sep 2026 14:49:50 GMT\r\nLast-Modified: Sun, 19 Nov 2023 09:01:38 GMT\r\nETag: \"2bd61348f3b28cca6de43407a3276c9d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 113353\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":113353,"size_decoded":113789,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x810, components 3","md5":"2bd61348f3b28cca6de43407a3276c9d","sha1":"6a9cb3901b43754d88746568ce83ea4b377b42f2","sha256":"ae3b41baf8a932d7d2dca20bb6d0728be951f1da8e1744240635c7bb06790675","sha512":"e0b0ca67fbafea0a485bb42fd86b0b6db2a2d573b6a9541d0facbc352dc4be6669bdd82b290a61eb8818172ff2f681a5d7d7c5d8378b961c3b3d0944640312ef","ssdeep":"3072:/AsCl9P8ykBKF1N8eayeNucGn7g1aWl6tB2:/AHksF1N8lGn74YtB2","tlshash":"8db313d4b2381e008e76c962ac2cb419f35573fd1ec06f55b4db2b70c1ea44856a16fb","first_seen":"2024-04-24T08:16:39Z","last_seen":"2026-09-27T14:56:36.15114Z","times_seen":2632,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":22,"connect":95,"send":0,"wait":120,"receive":186,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/logo.7b24974d.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.781Z","timestamp":1790520588781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/logo.7b24974d.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-1cad\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7341,"size_decoded":7698,"mime_type":"image/png","magic":"PNG image data, 276 x 66, 8-bit/color RGBA, non-interlaced","md5":"7b24974d93196d4d424e44305ffc7cbc","sha1":"ff5f217cca839eadc22b76f37087018cf8821048","sha256":"469952b3b43eb048a6a26aa6e5c3e19863602eab5abe0bf2ca02c1cb9afa1b5b","sha512":"0b19c4b3275677fbd71ac430a77f63e7a0f168495a8581d1704e5fcbd73fc8a7f68fe68b1d15b0a27a6e182b682d28b6f0afa1e871b63efed24a42a25103bc26","ssdeep":"192:ZX3Kclf6VDW0h7T+5CwmdwG6nqHzm/szd6Jx:JTf6dWeG5Coduzdi","tlshash":"57e18ed06efe8c4e5f5c4ac46c668884460311651045aff9d3a9fa193e33ec4a06e163","first_seen":"2024-07-30T16:20:20Z","last_seen":"2026-09-27T14:56:36.185137Z","times_seen":608,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/luxury-goods.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.135Z","timestamp":1790520589135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/luxury-goods.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-748c\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29836,"size_decoded":29995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"40e526a0590a77a6a7d920d75abeab98","sha1":"257a2794703d48f052cf80ef116528b9182657df","sha256":"53dd6d8b35872b5fde757695d9cc78404ce24ff308aef683bd6f0b871d99afc6","sha512":"82ae41f9b8692c5f5649f68867a38ae8688804f395694421434285c4c6d45009d0690b351b1298eb84a442a7beed6ec259ee86743bf5c465d1726a2ae3a0c9c6","ssdeep":"384:qbZMJ5VWN9lk5Ux5utOQ9YgdxjLG7pqXko+jW1X973ulFCg8VsLCGwM0iXHts72U:qAWa5Ux5nQ9Hxmtq9p9TuC+CB6Htxe","tlshash":"a4d2e126f5c67d8dd0c66433f9b71292578ff932b992a216e8fcd02b98e015ac751288","first_seen":"2026-09-27T13:01:17.534912Z","last_seen":"2026-09-27T14:56:36.161831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260904/home-carousel-electronics-20260904.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.103Z","timestamp":1790520589103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260904/home-carousel-electronics-20260904.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 10:19:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9a9b47-279d8\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162264,"size_decoded":162323,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1396x620, components 3","md5":"634189df747d5e305acc49213d1850f6","sha1":"70ccf822c181b2189a08d32427d69510a96bf767","sha256":"b740d699864bf0f1e08cd7593bc14a8474da0e1a5dec975644e24538bfca1c10","sha512":"7ca720b5c1b694ca67eae3a10cd08ed1a30abce9cfebad17ffe1d8183132aca2e255fe1dc7957c9bb98446b9f724df053aa3a8c806b3acea7c0d49821298ae89","ssdeep":"3072:rqZgjvN3GZDQHlGZhyqWyfFwo0EFYyFlDVPb5z7sDUNaEFwWfUKXd:bB3GZDQHlGPHJfUEaELPbZpxwWfrt","tlshash":"88f313036f58242596e0498f45071f7440b9325521defecd1e8def78be92a0ad83f9ae","first_seen":"2026-09-27T13:01:17.551324Z","last_seen":"2026-09-27T14:56:36.165299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/home-cabinets.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.130Z","timestamp":1790520589130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/home-cabinets.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-610d\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24845,"size_decoded":24999,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"43d60e009e53d30334b10f92e0fc5dfc","sha1":"04293ab8e03e352fca5b3942e266ad70d7e7c6a7","sha256":"ffff67419868cfa5a3feae35fb77dcaa58ac71ebbda48e16aeafc298f1360c21","sha512":"900d8df5b8056afa57c7a37803443e1f05ea0fb150600abccf49f32d9e869de60b30f930b19a7e22cf04f4e6299a4378423c6f59654700329f1a219fa4787e72","ssdeep":"384:qfX9AFZ79cdXdA4DY2afjB2MtYguqpacV1kndNf8X+en0mHszv96hC6NXnnXt:qf9Y1WdXdfsPjYMB11kndIO6hC6NXd","tlshash":"c8b2d116c788b786cdb294bdc73316eb3320772f49f485262f617ae3b8d4a6057409ca","first_seen":"2026-09-27T13:01:17.538725Z","last_seen":"2026-09-27T14:56:36.173037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/mens-clothing.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.120Z","timestamp":1790520589120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/mens-clothing.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-58f2\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22770,"size_decoded":22900,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"12a6537186ef793cbdb91a0a128a78a1","sha1":"6a274a0eb8e5bcbe3c2b3bae847050a00c5a9185","sha256":"c781167954d187cffeb98284779198d2cdf47ff2193effd2093c2c2f9086608d","sha512":"2de58f5c1313c36bdc67d2e96d07c4aa4711ac33c407ef496820f819a6dd4d4a4816c484f64190bac41228950311eedf1cf6f89c699bda0b49651f92d530f154","ssdeep":"384:qhSyBPgUDxun66pJ/lSqdNyoScz0aMukxxEGu4BmdxF3Fby1i/22EvJz9u+d+S:qhhPdDxu9ptE/yXMukxxk3dy192eo+dF","tlshash":"99a2e104fd232a6ccf6971f14b93d5be9b01d933eb44a2046d91d23936a53d3580eeae","first_seen":"2026-09-27T13:01:17.537597Z","last_seen":"2026-09-27T14:56:36.174486Z","times_seen":3,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/shopify.c0a53e62.webp","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.785Z","timestamp":1790520588785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/shopify.c0a53e62.webp HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15728\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\netag: \"6a9858be-3d70\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15728,"size_decoded":16000,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0a53e628ff60f2e62d58160ac97fd98","sha1":"fbfbbdea97bc5b54783b2e4358fd803305eb2afe","sha256":"ba5255b49fe89d00a39a09a91533f0c924e080b17235fd38178be01720887b33","sha512":"419aa8f68d7951140cb351dd8cd350ee56a592e56544b5427d8cd2ea637dd991d95b4a447319d6fa668fc0ef7af1ec0f9a7ffd5375ed23be903f8b5bb84fc36a","ssdeep":"384:Mb7M0VPIejDv/rxMfJaVMMAoqwUyL+d/3b/AjMSSHLMaWLQ:Y4l8vjxMfJa6Doqwxqd/TMS0E","tlshash":"f362d06242fc695ed84a456c9e9823b343e14f52f7dd270b8eb1ea938818b617d513c0","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-09-27T14:56:36.170244Z","times_seen":2037,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260904/home-carousel-fashion-20260904.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.104Z","timestamp":1790520589104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260904/home-carousel-fashion-20260904.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 10:20:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9a9b50-2d3c5\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":185285,"size_decoded":185302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1396x620, components 3","md5":"3cc6bf69c2761f57eeb04757abca25b9","sha1":"e559a84e373d44e430344276f56eb1d89125e37b","sha256":"aabf78f6650e9920f4b6a8a38fbbaacb81547d82dc4d128ad6302cac47f59437","sha512":"178d16c081988aeb231262945dc93a9f87a26b768e4b5ddef7b04fe84b7ef5283fc4693af538471b6f815dea53604161e83b4092f67f07385182eaee0589c6d6","ssdeep":"3072:V9kdBRaArvL7Q8wAtiJeP+mWbmsaOje2X/vgcOgLHvWAiS97eukGcT:PkdjR4jASDmsB9/7OgLvZeRGcT","tlshash":"d30423d6df8e02a6db189db6f7afe21ae065e5f348c3b5098ca04110cfdd5ed444886b","first_seen":"2026-09-27T13:01:17.521449Z","last_seen":"2026-09-27T14:56:36.166015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/womens-clothing.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.121Z","timestamp":1790520589121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/womens-clothing.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:31:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0e6d-69aa\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27050,"size_decoded":27166,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"21b55d3214d7584b4869a9a971a3e316","sha1":"398056158c5286630d7f1269c9fc20f864caa708","sha256":"8bc80d887da0f2c65d30f55811bbf2546ed97e93676c9d7312e17f5973255ef8","sha512":"c31181b19471b32a4b2ef59f0f463cce99ae1a13a1e45d47216938d23d61ce743d6ee013c13991b4bbff2638937a73d503db1b553dd630d7e5f8991e991443f4","ssdeep":"768:qRHT3TNhm1f5xritQRykn22SpQ0BxcA/p:qh2g6RRIyAR","tlshash":"0fc2e0c4cde0ef399abe2ffe529865e132c72c84e0721a68b6932139510484291dfec8","first_seen":"2026-09-27T13:01:17.501349Z","last_seen":"2026-09-27T14:56:36.188903Z","times_seen":3,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/zd.161ad784.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.790Z","timestamp":1790520588790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/zd.161ad784.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-b5cd\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46541,"size_decoded":45032,"mime_type":"image/png","magic":"PNG image data, 656 x 500, 8-bit/color RGBA, non-interlaced","md5":"161ad784813b03a70ad66f59b81d22b5","sha1":"28b29fed86e86e02f5722cebc969ac8e14613c64","sha256":"31539b56c579f839c414f5d54d9d836a87fbc11c84117dd6cd43bab47fabd7ef","sha512":"13b1d90bc99ad387ddd26043282360849bf4503dbf2a98496425e5ad54c0ea4c2df154d3e5f5d359a98416987ff100c746f6cbfa62ad90ce24d1d756693508f5","ssdeep":"768:UmZUUQar+kUUrD2cfjD2pUUvQa8oCc0+MNoMZ1k0AmVgGJvOnr:NVQMcC2tUUoKF0hX2LcD4r","tlshash":"0b23e145fd42b25cc3fc4073910a5b7473ae3e0a557d8b88b8658b1ace3b1fd0e56a26","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-09-27T14:56:36.194195Z","times_seen":1196,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.779Z","timestamp":1790520588779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":392,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-09-27T14:56:36.147751Z","times_seen":7426,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/2720fdb5-6ec5-4112-a839-a2eda817faf4.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.247Z","timestamp":1790520589247,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/2720fdb5-6ec5-4112-a839-a2eda817faf4.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587XXPYQ61SXXEHD\r\nx-amz-id-2: EehIX2o8x2BPQSi8Gy4K5AicI65aYRCQ0sGZPEFMcaKE1g4emJKO72+6jdHGaHUZkAltUQgUiKs=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:48 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/ee56ce9f-d4ca-4967-b1cb-16e49b0496ae.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.258Z","timestamp":1790520589258,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/ee56ce9f-d4ca-4967-b1cb-16e49b0496ae.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587GY4AZVKTYZXZH\r\nx-amz-id-2: 0Zw6F1lXFUvSPw3dfNarPm/zOfOTgdS49LaaTqMNkV88Kgnuy0MFh8RTckoY8uEDsBDFt7gXaVM=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/clogo.87afa62d.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.788Z","timestamp":1790520588788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/clogo.87afa62d.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-102c\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4140,"size_decoded":4512,"mime_type":"image/png","magic":"PNG image data, 199 x 38, 8-bit/color RGBA, non-interlaced","md5":"87afa62d9d61ee86c68cf424b86676b9","sha1":"e746158989116f63f97011022db1d359254aa474","sha256":"8ab038ab39e0d09736b30c085dd2edbcc70e2d2a655011ab52efdf6eef1a5070","sha512":"b505b0e6f9d064faddd598c6fa0d59a177f080bf6d655baf08c1f7dece3786de295ef6f9fa2d6dfc1bf60fdef4fba4780ba210c0c23ab17df1c9397a70d8283e","ssdeep":"96:jS9YhQjiNC98LoBVyma8DzAjVRoqP3Uq3ni8edM3zY9xnESue:jSDeswoBwsDUHRydM3zYvMe","tlshash":"32819da331ad84a9a0b3cc3fb78a042ddba6f6650a1b835b94678c1d11cadd30a29641","first_seen":"2024-07-07T22:26:52Z","last_seen":"2026-09-27T14:56:36.167453Z","times_seen":1193,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/b732a846-082e-4b0b-97e1-c86868265f98.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.242Z","timestamp":1790520589242,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/b732a846-082e-4b0b-97e1-c86868265f98.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587R380EF5EHY9YB\r\nx-amz-id-2: MoS9mfs7pa7lnCIBAKCvApXyHEVQbW6AYk504H8F1o3LaZnDoTL+yf4ocgQcf+KA3idG5WdN9Xk=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260903/1788445717959802969.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.119Z","timestamp":1790520589119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260903/1788445717959802969.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 14:39:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a998688-897\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2199,"size_decoded":2573,"mime_type":"image/png","magic":"PNG image data, 51 x 45, 8-bit/color RGB, non-interlaced","md5":"577ddeb7a2055c4c9410963799f2796a","sha1":"14f866f2c53c576609578d71909ab3aec7330745","sha256":"a9b144c545dec96a7cacd6c68892ba7542d50cf3dbe1d615478742ea9b084e7b","sha512":"e2d10dcba371909dfbd2996c4d301dba84c2f9a14daa79d3bdc6d63a4240f708e06b73ee682b6a39a8f3fe4d17df95152cafb30c170a7f6bb9c353fb8583569a","ssdeep":"","tlshash":"17412b124366d5186a0852db0772386def66518c37a8782e48d24a2fb405a390aee885","first_seen":"2026-09-27T13:01:17.545224Z","last_seen":"2026-09-27T14:56:36.156715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/fishing.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.123Z","timestamp":1790520589123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/fishing.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-791d\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31005,"size_decoded":31103,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"d39d8b828986448c1752ca6877a7c001","sha1":"899391522feb856d6fc81bbcedc0b9ad2d072507","sha256":"f2cdc2172092b8e04705670f69891744f01626940b897257b3f1b515d07d1e51","sha512":"ea605555753f64c13d25f14baee785d4333e3adf203f74be8688bbdb3623b69745057642bf86ade082ed8c1f2dea1ac75962316a8c300014d5cc628a2695f77a","ssdeep":"768:qcwKgii+WEzUA2/XmtsjnD7Z7FDMOIRIp2ICMAN1zGrT:qcU+Wmv2/XmCjD7Z7FDM0gXjXz8T","tlshash":"efd2e251fe533472b086903f97a677b77fa98804e50d27a0bfdc4278ea1cc6b2812659","first_seen":"2026-09-27T13:01:17.519021Z","last_seen":"2026-09-27T14:56:36.166688Z","times_seen":3,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/kids-toys.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.134Z","timestamp":1790520589134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/kids-toys.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-6648\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26184,"size_decoded":26301,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"49ff8337352ba363386bdeced67bd6b4","sha1":"77b6d3922cbf366c478aea123b10a93ec172804d","sha256":"d8ce8100605f84c2f3b1f7f6299afdf52c36e453d417d81f755e750dda7cda2c","sha512":"0611dd76105a67cca68700b8f6efee635fb187292bb2789787802f21c447f6fe604d9b7a337bacd2e584a47c4ee381346128d214c68786cb6451e05c0990ba25","ssdeep":"768:qYwK45uHpTuV3+ERvtUF2yNJnawJBS3a4628wy:qDuxunNtu2yNQQ0T6L","tlshash":"9ac2f1c9c77ae1afdc32d0bb19f46a50710f42d3da65891c90b02ac8a7c5aec472c776","first_seen":"2026-09-27T13:01:17.511163Z","last_seen":"2026-09-27T14:56:36.198272Z","times_seen":3,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/images/seller/20260905/mens-womens-bags-store-20260905.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.234Z","timestamp":1790520589234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /images/seller/20260905/mens-womens-bags-store-20260905.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 04 Sep 2026 18:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b108c-4b740\"\r\nexpires: Sun, 04 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309056,"size_decoded":309516,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"39f7db2a2742a2ba93c2906dacb16c88","sha1":"10b7123226883b3bd0ca03afdc729bcfbad2a1af","sha256":"dfc649e2c37d14224319efc0998ed961ead0f6bc01a69b2b284f03a015c5e4bf","sha512":"420728a739343224ce158933abc9de708f201c203f45e2bc1ad462ffc4226ad30c0e9a9ef67b28afe9ce890b72800d11c0fe5259a59205994a2f6f0c5f485f86","ssdeep":"6144:Q70i9x/t/LjVqYHoEFWFVJNc7J3f5rfUouN873kBHD3XiaX4aE:QF/t//Vq6oEcJNc5f5fbW8+DiuE","tlshash":"5664235a16e0e80677bc4b04dc87ee3321e8e6547a95cc51a8e98522f607ecfbfd1069","first_seen":"2026-09-27T13:01:17.523832Z","last_seen":"2026-09-27T14:56:36.173755Z","times_seen":3,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/app.17917eaa.js?v=20260908-withdraw-chain-switch1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:45.632Z","timestamp":1790520585632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /js/app.17917eaa.js?v=20260908-withdraw-chain-switch1 HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Sep 2026 09:36:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9fd72f-15b2a6\"\r\nexpires: Mon, 28 Sep 2026 02:49:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1421990,"size_decoded":440218,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64990), with no line terminators","md5":"9e5d7737ea49b12533004a5d3d47deb6","sha1":"e49d2d6a3771e6d7e5c4576f2df380f29003fce5","sha256":"d6f6b3d658ea9984b903de79a7519943dc13dfa1c7654b47f630c667ea4b317a","sha512":"19918afb09d91c3bd9572ca28eca38ced0fb089e883bd1ca15bdba4567e6ef864fac305b94ce5570d0318960d6f33a30dbb681655fd7942c561f7313a4880159","ssdeep":"24576:wIJO8ObPhgyMU9awQovEtLzv9HxIUKO73Ukx95/+4s69TEssfB9Lqb5xP7BniwXy:wIJO8ObPhgyMU95QKEtf9HeLgkQR+VGG","tlshash":"43558def57da76fc0c545646a04f7a7431981cbafb96f4e008ecd61922e5e81c213f2a","first_seen":"2026-09-27T14:50:40.53357Z","last_seen":"2026-09-27T14:50:40.53357Z","times_seen":1,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.094Z","timestamp":1790520589094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://yuye1.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":392,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-09-27T14:56:36.147751Z","times_seen":7426,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/type/20260905/category-icons/beauty-skin.jpg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.131Z","timestamp":1790520589131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /type/20260905/category-icons/beauty-skin.jpg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 04 Sep 2026 18:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9b0d66-510c\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20748,"size_decoded":20872,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"7e059a746b215d078c73fcd744164285","sha1":"4f5fa08ad5dde3f36908b6ce4747d48017863b29","sha256":"9468ca30039b2cd083b2525e188e9a7503d941dabe8bed50d2ddf38520717c1e","sha512":"0b35c92750ca0b82515dcdbb132bebf91f1cc97e9dda279963e90ec6c31e5ff2d377190dcbeb626f8f2f8b78630327cf361195307a273f85f10f03666880eb76","ssdeep":"384:q8MUSMVAHIcSqetCOPUB9kmtvjo+rUMHMz0N5XJ/Bj:q8CpTetCOMB9kmtvs+I14ZJj","tlshash":"6192e156df3da6fc728327b0954652698a47c37df094ca739c6002926bf01e354f812f","first_seen":"2026-09-27T13:01:17.516752Z","last_seen":"2026-09-27T14:56:36.155489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right8.52dfdd77.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.400Z","timestamp":1790520589400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right8.52dfdd77.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-153d\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5437,"size_decoded":5623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"52dfdd77a3e609a3dfcdc62551f63915","sha1":"76f99920e705e7f2ea7aa14eda783b3b0be7a2d0","sha256":"2694904c51b4dfa120b1c8cbfca437ba901b107a6b901fc34799fc9d9da1a947","sha512":"0893ae02f3cd92485b211852ccee98714ddd9202a2d0c7fe556ccba6e598729161ccea477c324156b336a996a81a6312a42b7f26ae77b1962b763af0cf5cc28f","ssdeep":"96:WwDk9e67O7qkhkxrzmq3VT4E3sHsov69WGPqLQ62sqdqub5mm2fB/+DY:Vk917CGXov4JqLx2sqAOifB/UY","tlshash":"bdb17d287fce870cfdd28a71862ff379a1825e43260d278b50f5282cb5891dd8d154e1","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.180275Z","times_seen":1965,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/shoplogo.f2298094.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.747Z","timestamp":1790520588747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/shoplogo.f2298094.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-393a\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14650,"size_decoded":14967,"mime_type":"image/png","magic":"PNG image data, 276 x 66, 8-bit/color RGBA, non-interlaced","md5":"f22980949230c688ba0c1b9304c11c5b","sha1":"ed805a451e522dd6078e9f55e7a3307a391200bd","sha256":"0616e0be23a82a4b936d024cb7cb99e0532b21999386257760bb16e329d1fb9d","sha512":"0937244e50d6964ad68adcf58804d0e40723e5b509392b2bf7a7eb238359da53c8d7f3c2fadf3f18695c55ba10a76eca877081ad6346f9452f268a2275e0e6f3","ssdeep":"384:RsQKUargNfMlWQvF2XoNa2BYp2ollMDzmFENrK7iXil:iQKUYqfMl3F3DYQoIGSZ8qY","tlshash":"2462c01fa3681d728f8c26263e811ec07f574387609efe1cd4168c7ada743a1467a4aa","first_seen":"2024-07-30T16:20:20Z","last_seen":"2026-09-27T14:56:36.178414Z","times_seen":638,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/TikToklogo.8798ec77.png","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.947Z","timestamp":1790520589947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/TikToklogo.8798ec77.png HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-d209\"\r\nexpires: Tue, 27 Oct 2026 14:49:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53769,"size_decoded":49310,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"8798ec77b24780c54023161614eee12b","sha1":"59414d9684c64b31a7378b24365d62389d59d629","sha256":"fb1eb66b616065513f97f8b98543417af87109502c53066dd04352b7d070ca52","sha512":"235cbab437385d21a07a1658f1c7cd704e4656a418939b991df8635f4890fb82d5a370f57962b3f20b29def52b73fc90319f3a554553962243e9e59eff5e2a45","ssdeep":"768:51gmL9Qd4Hey09dVBJTcMaFszMQSyr0zHnkk91ncR9JsRjYmrkDDXizWF100bcEp:omL9Qd4l09dX+MH47kx++/D7YObO8gA5","tlshash":"d133d00ca28ac954e0024bdfdef68f1067712d1215d79796b02dfada4c94f4beea35c8","first_seen":"2024-07-06T16:44:42Z","last_seen":"2026-09-27T14:56:36.183865Z","times_seen":616,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"argos-shop-online.s3.amazonaws.com/avatar/2023-03-22/c2ee0f57-1116-40ad-aca7-49b9767dcc11.jpg","fqdn":"argos-shop-online.s3.amazonaws.com","domain":"argos-shop-online.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.225.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.251Z","timestamp":1790520589251,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /avatar/2023-03-22/c2ee0f57-1116-40ad-aca7-49b9767dcc11.jpg HTTP/1.1\r\nHost: argos-shop-online.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587RACXBE8RGXE8T\r\nx-amz-id-2: 961/dI6tPWZUK54Y+xH07lEr9amg1myyMwmZcT2YS6FbkckC+LMCaD+/ap6+lV43xKO5TkcTWHM=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetao-shop-test.s3.amazonaws.com/selle/2023-05-16/576efa67-81cd-428a-8bde-80d57cfb647d.jpg","fqdn":"hetao-shop-test.s3.amazonaws.com","domain":"hetao-shop-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.125","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.261Z","timestamp":1790520589261,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /selle/2023-05-16/576efa67-81cd-428a-8bde-80d57cfb647d.jpg HTTP/1.1\r\nHost: hetao-shop-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: 587PEYR1HGETMPRK\r\nx-amz-id-2: 81FO80jrjOgO4184KjZ4BJkvGcdSwthDcsROp6t9+f7BPKmj/UZjI8h9NNHZBNoOscQoOudUbbQwO9cN9cC9a+95A51J0c0s\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 27 Sep 2026 14:49:49 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T00:46:37.048779Z","times_seen":18697833,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right2.cc786c17.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.392Z","timestamp":1790520589392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right2.cc786c17.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-1e21\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7713,"size_decoded":7992,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"cc786c170d1d6149749d10d1c582b823","sha1":"e457775e891371693e2917995d61c0aebc469232","sha256":"2542eea6cbcb84492d4c00cf3b1d9d8519352b424f0cdff53503e25b61b48a06","sha512":"bcca4adabfe737eb7354aba0b5808df7e2be3d7fc3073e436abfc45953d8e17515677a9ce14d9b7a2745c680048e862375274c79f8e85f1ef53fe21df09f070a","ssdeep":"192:VVN0t1U7czDKKmtGPnBAZkdlpo3XUa97UggVBPGBbA:Vu1IcqtGPnBmkjp4XzwzBPGG","tlshash":"71f1afba358c2f53fad13db4ac9c72a27b242e3b5941c35f80f56f6470be084106a61e","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.169648Z","times_seen":1990,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/img/right5.44b8369f.jpeg","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:49.398Z","timestamp":1790520589398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /img/right5.44b8369f.jpeg HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-17ac\"\r\nexpires: Tue, 27 Oct 2026 14:49:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6060,"size_decoded":6251,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"44b8369f97d209638d14f43e1311cea6","sha1":"a0a4552bd9e8c5e76e852201f043e22523efd828","sha256":"95e5270a5cb760dc32383b20becb82c7e07cb66d89cadfaa134852841280ec37","sha512":"852d8c9352bad527aded0050836e7e81d8506f560bd0fa7d89d31a88e5852a07946de0ce42bc38e02df520592792160c26a3c2f2441bfc61a7a1f42728b870b4","ssdeep":"96:WwDgePNhAR+ZJwZ2L0NuE7wY9WblkOR3S74MH/dhNVYH4uQ998h6PQyOe:VDwROwZ2g0KwCWbxRCkMH/xVDj8hkQi","tlshash":"66c17d4104eff707f9e39139539cb33cd68b3c419909231b4e54b870a5db7915aad126","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-09-27T14:56:36.160251Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yuye1.top/js/chunk-aec92c58.0700a032.js?v=20260905-directwallet1","fqdn":"yuye1.top","domain":"yuye1.top","tld":"top"},"ip":{"addr":"45.200.14.229","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yuye1.top/","date":"2026-09-27T14:49:48.214Z","timestamp":1790520588214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yuye1.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 09:25:25 GMT","end":"Fri, 25 Dec 2026 09:25:24 GMT"},"fingerprint":{"sha1":"AF:CC:CB:9F:05:9C:C1:E7:BE:32:EA:14:27:38:EF:FC:6E:BC:4B:C6","sha256":"AF:C7:EB:DA:FA:F4:6F:95:5E:AA:7B:A5:23:13:98:7F:77:C0:F1:96:78:48:43:D0:B0:EB:09:A2:33:41:C3:F7"}}},"request":{"raw":"GET /js/chunk-aec92c58.0700a032.js?v=20260905-directwallet1 HTTP/1.1\r\nHost: yuye1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 27 Sep 2026 14:49:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 17:11:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9858be-77dd\"\r\nexpires: Mon, 28 Sep 2026 02:49:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30685,"size_decoded":12373,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30665), with no line terminators","md5":"fee7c90d36ce3274e2c8aa75440792a7","sha1":"0a86e1089a197732487f52c0b3ddba4942697074","sha256":"aae1cc251b44a378d549539278d61148719109c6de43578cf0202aa5c98346d9","sha512":"f38877a66ad0778988f9e8a5301abfc3426ed923d03e6a04d04b1776a4bf40f3a0b752125593b3204bba3571a46597c71f76cf02f4a197cdcaf0c059ff6c0889","ssdeep":"384:bqDsnNXqoCdUHD3VnT0UBEDKalA4fMPhu/QeSYHWvzghY/Xh+O6alaSX9ikFO9:H6oXTdBEDU8/CYnY/Xh+PalaE9ikFO9","tlshash":"f0d23b535480b87d8a936256340f2299ba363f85d446cc96b53cdce9e2bed30371bb2d","first_seen":"2026-09-27T13:01:17.471099Z","last_seen":"2026-09-27T14:56:36.158988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"yuye1.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"yuye1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}