{"report_id":"6caf34a5-49c9-4eca-b47d-3a16bba0584e","version":0,"status":"done","tags":[],"date":"2026-08-07T21:14:53Z","url":{"schema":"http","addr":"53283.com/","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"192.253.235.201","port":0,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"53283.com/4R7hrMd","fqdn":"53283.com","domain":"53283.com","tld":"com"},"title":"Welcome to云顶国际","dom":{"size":1935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"fb689806ee7db41ac75d4d7f06765e0d","sha1":"78669cfa67fa04d4c5eaa51b9f7ec16c51bd4ae8","sha256":"ec17b7899b8972b9711959027b62f468ec77f3beb847ac02dba3c4283907142b","sha512":"3b9e2ae7e82ad8ec3d13c2016338ee3cbba5914af4b3ad815b31f81acb719618ef3801ee491a0a0c34a5759841fa65867e26cc5146760b0c0f5104dd6c755014","ssdeep":"","tlshash":"a6414242cb83010fb55394689fbbe75832958013c606cea97e4d63d4cf99695c8f678c","dom_hash":"domhash136ebb7420a10319964920f8f8f2aea9","first_seen":"2026-08-07T21:14:57.645417Z","last_seen":"2026-08-07T21:14:57.649944Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"53283.com/","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"192.253.235.201","port":0,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T21:14:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"53283.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"53283.com","ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":34894,"sent_data":2178,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"53283.com/4R7hrMd","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ca66f764f99b26a5f1826c1237943c9","sha1":"6c325248c9ac4c601704e3d1dab1e50eb8cab9ed","sha256":"a5db738e28a259764468933e226e91699133a42e5a24deb8acdc7ee2a8115aa3","sha512":"66a5f812f171b522f85afc0059004fbea57f1b3dab617a208f74f8b075c9f977e96ed7cb29f4b443980ffc630257eb1dc8f3e744adc0126bad9690c6a5da11d1","ssdeep":"","tlshash":"cee020ca39c21525969340269f475120302526275805d840fe0e9752cf35a5f91fa59d","size":342,"data":"","first_seen":"2026-08-07T21:14:57.65782Z","last_seen":"2026-08-07T21:14:57.65782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"53283.com/4R7hrMd","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T21:14:30.097Z","timestamp":1786137270097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53283.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 09:33:58 GMT","end":"Wed, 14 Oct 2026 09:33:57 GMT"},"fingerprint":{"sha1":"18:82:73:DE:48:E9:5E:A2:44:4E:28:C6:EE:6F:A1:EE:C1:32:55:E6","sha256":"14:D5:5B:97:8E:71:56:A6:10:1B:22:A7:AA:2D:F8:93:87:7B:93:32:F4:60:6E:95:DE:39:3F:02:8E:2D:0C:4D"}}},"request":{"raw":"GET /4R7hrMd HTTP/1.1\r\nHost: 53283.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://53283.com/3NXpska\r\nCookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; lang=zh-cn\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 21:14:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: sameorigin\r\nset-cookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; path=/; secure; HttpOnly; SameSite=none\nlang=zh-cn; path=/; secure; HttpOnly; SameSite=none\r\ncontent-encoding: gzip\r\nserver: jiduncdn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1935,"size_decoded":1377,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"fb689806ee7db41ac75d4d7f06765e0d","sha1":"78669cfa67fa04d4c5eaa51b9f7ec16c51bd4ae8","sha256":"ec17b7899b8972b9711959027b62f468ec77f3beb847ac02dba3c4283907142b","sha512":"3b9e2ae7e82ad8ec3d13c2016338ee3cbba5914af4b3ad815b31f81acb719618ef3801ee491a0a0c34a5759841fa65867e26cc5146760b0c0f5104dd6c755014","ssdeep":"","tlshash":"a6414242cb83010fb55394689fbbe75832958013c606cea97e4d63d4cf99695c8f678c","first_seen":"2026-08-07T21:14:57.645417Z","last_seen":"2026-08-07T21:14:57.649944Z","times_seen":2,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"53283.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"53283.com/favicon.ico","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://53283.com/4R7hrMd","date":"2026-08-07T21:14:30.433Z","timestamp":1786137270433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53283.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 09:33:58 GMT","end":"Wed, 14 Oct 2026 09:33:57 GMT"},"fingerprint":{"sha1":"18:82:73:DE:48:E9:5E:A2:44:4E:28:C6:EE:6F:A1:EE:C1:32:55:E6","sha256":"14:D5:5B:97:8E:71:56:A6:10:1B:22:A7:AA:2D:F8:93:87:7B:93:32:F4:60:6E:95:DE:39:3F:02:8E:2D:0C:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 53283.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://53283.com/4R7hrMd\r\nCookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; lang=zh-cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 \r\ndate: Fri, 07 Aug 2026 21:14:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: sameorigin\r\nset-cookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; path=/; secure; HttpOnly; SameSite=none\nlang=zh-cn; path=/; secure; HttpOnly; SameSite=none\r\nserver: jiduncdn\r\nx-cache-status: MISS from L1:1300\r\nvia: L1:1300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"","fingerprints":null,"data":{"size":31376,"size_decoded":31728,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d95d074a2ff9e274a6ae1d4edd75735e","sha1":"61b1d5fce79a6dade4892b1a9e0f9c542ef61cf7","sha256":"26e356ab1500c038ba55ab0e5f027afab804a2a0214ec240c8a7b25374a05916","sha512":"b3e9aed759ab7cdf8ae1647688e29698000fccf8292a1289626d150a74b5c9fd16efdea2d84d8e7b9e8d25792beb3c03d9a61ab7f7d0c7544e0819e1cfb7aa73","ssdeep":"768:5t8wPICiVynfgcM8xOXb2skXYaly8JDgF1:vhbfgcM8xOXb2skXYaly8Jo","tlshash":"26e286066af152f1b842b8665f671f11ae97001bd392b460bfddcf5e9f80c608c9764e","first_seen":"2026-08-07T21:14:57.65051Z","last_seen":"2026-08-07T21:14:57.65051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"53283.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"53283.com/","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T21:14:24.890Z","timestamp":1786137264890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53283.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 09:33:58 GMT","end":"Wed, 14 Oct 2026 09:33:57 GMT"},"fingerprint":{"sha1":"18:82:73:DE:48:E9:5E:A2:44:4E:28:C6:EE:6F:A1:EE:C1:32:55:E6","sha256":"14:D5:5B:97:8E:71:56:A6:10:1B:22:A7:AA:2D:F8:93:87:7B:93:32:F4:60:6E:95:DE:39:3F:02:8E:2D:0C:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 53283.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 21:14:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: sameorigin\r\nset-cookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; path=/; secure; HttpOnly; SameSite=none\nlang=zh-cn; path=/; secure; HttpOnly; SameSite=none\r\ncontent-encoding: gzip\r\nserver: jiduncdn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":531,"size_decoded":712,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7416668a5ad99fc3c2ca87467587b3ea","sha1":"03823d0f14786eddc5b40b72176ad4a80de51773","sha256":"152a6b3c27a89c8587b8d721cb6cd77a0e88bff275a0b0ad72f6a03a98c29c4d","sha512":"68d748850af7714dd83ddec31b356756f51659c071d7f1f3d004c5684b24b0edfa4bfaf0234c045adf7927079fd0807018dc0cafd54cbc3f190786878073e7c5","ssdeep":"","tlshash":"4ff0c9c938d11025834390244ee3a268202a32272841dd00be0ea9a09f3720b90bbacc","first_seen":"2026-08-07T21:14:57.653551Z","last_seen":"2026-08-07T21:14:57.653551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":315,"connect":220,"send":0,"wait":280,"receive":0,"ssl":446},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"53283.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"53283.com/favicon.ico","fqdn":"53283.com","domain":"53283.com","tld":"com"},"ip":{"addr":"103.199.100.132","port":443,"asn":18013,"as":"ASLINE LIMITED","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://53283.com/","date":"2026-08-07T21:14:26.346Z","timestamp":1786137266346,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 53283.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://53283.com/\r\nCookie: ssid=b89fedf71c0ef7ca75ec38607cf46471; lang=zh-cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"500","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T23:24:31.532418Z","times_seen":17769129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"53283.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}