{"report_id":"6e01ce23-91ad-473f-a6c3-6e1023678d86","version":6,"status":"done","tags":[],"date":"2025-10-22T00:25:15Z","url":{"schema":"https","addr":"cobbeetty.top/Issue/details/Lang/en-us","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":0,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"cobbeetty.top/Issue/index","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"title":"Coinbase"},"submit":{"url":{"schema":"https","addr":"cobbeetty.top/Issue/details/Lang/en-us","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":0,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T00:25:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cobbeetty.top","ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-10-20","domain_rank":0,"first_seen":"2025-10-22T00:25:09.223376Z","last_seen":"2025-10-22T00:25:09.223376Z","alert_count":36,"request_count":18,"received_data":1103235,"sent_data":10550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2025-10-15T19:32:26.13245Z","alert_count":0,"request_count":4,"received_data":18749,"sent_data":1919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.staticfile.org","ip":{"addr":"27.124.9.124","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-03-29","domain_rank":851278,"first_seen":"2013-08-23T08:51:19Z","last_seen":"2025-10-21T04:26:08.426629Z","alert_count":2,"request_count":1,"received_data":93683,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/layer/layer.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-07T18:58:29.354259Z","times_seen":14226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1761092695403","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6572a51bdaf6851ef3978d3bdc48e346","sha1":"47bf1994dcd8c975943999e41c8c4fec63aa46f2","sha256":"2ab70f797fc234ab9dedfdf8bd3d754fb1745f3b90dc015220e50a548e984c7e","sha512":"5c0632b64f805518c38a0b5bcae483c75050c29e1d66c2563c7729109032ef22f9f9fb27a483a834d5766fe6f2b6bc0c415c4c1988ea9dcc69e8f95ce42ff4d5","ssdeep":"","tlshash":"b021f1774608237a42052df7e57f2e0eda32185faae9c7d9c4344e51106e73af4319e8","size":1199,"data":"","first_seen":"2025-10-22T00:25:19.113944Z","last_seen":"2025-10-22T00:25:19.113944Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","size":1281,"data":"","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-06-06T06:33:26.71062Z","times_seen":634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"27.124.9.124","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T00:03:10.48845Z","times_seen":21928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","size":11264,"data":"","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-08-08T15:12:17.717897Z","times_seen":14271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-07-18T09:26:51.459283Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Issue/index","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e238db05c9c83358ae43a5c949787abb","sha1":"5a025959c8f59575ea8620bf6ca5675d6906c518","sha256":"4235121504c32ecf46fc9001831a13f75cf4f14aa04fc9e45f66194220654a19","sha512":"0021c569141dddea7f586da7114225797a24e10c99d535eaf908be5f17112ee1acfffb1cd68c8a7c29538f36278239643988ebadc99056e56c18b4410052988d","ssdeep":"","tlshash":"ece068125b1671288029305ada8e1d6466e0122d25f0c4014698ccc46434e27c3ba99d","size":344,"data":"","first_seen":"2024-07-10T22:46:49Z","last_seen":"2026-07-28T19:19:26.649878Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/layer/layer.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","size":19831,"data":"","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-07T18:58:29.354259Z","times_seen":14226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Issue/index","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"396f4c626513be525cbc7d781eabf627","sha1":"8ad4bd1782ccb7a9ad5d8cb9348834358e349824","sha256":"003378cdaaae27071eeaaa53e3012a60f10b5c53ee67e7143bf0d9b93623dc5c","sha512":"fb368cf0059d05825168ad5aadc88e70c320082b39e8fcef22d7aeb7b005dc799932b2ba462dcf366f29ad8a01b855d5fd2d10f12ac04a81d3e08a6341e52bae","ssdeep":"384:sbYpA2XqL6znjD45JRuMiuqD2e442NQRhEvyrfnvsfBaRqpv3sMJBZYdcsAhB+Su:sH+uQ4XyrvvswmvX3ZscWSu","tlshash":"b7d25491e77cab36239641af6ade40e1eb35a029327b851e381cc29817d1e3857773f4","size":28994,"data":"","first_seen":"2025-04-12T16:00:29.673249Z","last_seen":"2026-03-25T16:00:52.890969Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84280,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-07T18:39:45.815477Z","times_seen":10275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Issue/index","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbbb012e519b910a02da83ac6d3112da","sha1":"a03af70ac8200203516bb605834e1e3a1a061948","sha256":"b3f004b5887b020f0abc7d1046d655e1b275a9eb354f05212175561521105a47","sha512":"5c76b4a0f8abfa543ae0c28835d8685715b0899a787e39f251d28a06484c9f51a0de7dc1fc258b4891080768550ee830e5b0594bbac8a8e61594d117ce751b80","ssdeep":"","tlshash":"6cf0c96e0a1ed7ff70a80235532aa2ef70cd4baa90076807fe87021716ac118bc01ea1","size":527,"data":"","first_seen":"2023-04-25T18:57:28Z","last_seen":"2026-06-04T15:30:27.669974Z","times_seen":6997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/css/bootstrap.min.css","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/css/bootstrap.min.css HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 31 May 2024 13:19:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6659ce6b-27293\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"3afe15e976734d9daac26310110c4594","sha1":"4f14a09a606c99a11f8fda15564ef66f70402826","sha256":"680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c","sha512":"aced925c428148809afc07f28442b966a58508ea24d6b7203d87c63aab57df93b28ab68183a5dae0d9c12705e0a484685de5a370099c42788c869db686d0dcea","ssdeep":"1536:2THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26H:YH9vGGq3SYiLENM6HN26H","tlshash":"03f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T04:00:44Z","last_seen":"2026-08-09T04:08:34.71219Z","times_seen":25906,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/css/base.css","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/css/base.css HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 06:24:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6714a226-64e1\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25825,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"6215c6c006a53c771602765fdc9f7d46","sha1":"6ad1b7bbce6bcee91a9138798dd4713f8132faeb","sha256":"a1d0203e3ec7386376d5d2d3dc89108f7957d6b99cdc62784fa13efc71a22281","sha512":"06301e42f5894ad72ab29b7f580acaf42bc0679e6c5cae4d7760b4c611bc5aaa26f6d8f4949c2f7d6f3a76accbe926e2c1ae6ad5fda7eb65ab394e99c54d06db","ssdeep":"384:mPFiOfPjRmNi2RoLy6IbRiWc2FDwFxYorvRhEZ58s8BXR8G8LrB888t7jL5ZB8Tz:XucN39FDwFxfEZS9YzqtRB8TFHMrdu","tlshash":"52c296a7dfa30901b81bc5a41ff9ab15236c8017910bdebd7fd53648cf462d898a27c6","first_seen":"2025-04-12T16:00:29.646674Z","last_seen":"2026-03-25T16:00:52.807323Z","times_seen":52,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Upload/public/66a25b34ca00c.jpg","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Upload/public/66a25b34ca00c.jpg HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 13 Oct 2024 15:22:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"670be59d-1064\"\r\nexpires: Fri, 21 Nov 2025 00:24:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 225x225, components 3","md5":"40c172abd939712649cd17295a99d38b","sha1":"84f5e7caabf6a9718cebe63e65b42469747c6e51","sha256":"4386c7758db522950527f2fdf6b830f882f9bc7a4687b4902c9b8fb8deb0faff","sha512":"9eecf6ba06c131c33bceec977e845bc2dd923275447b709e17cb3625d294a1a005f77f5141595539edd52bcdd4d4db76aa91429d5b7fa80613303d2669ca6d4f","ssdeep":"96:IrKOoI1U/Gx++Dr2dXcOeHrwBZlXQcMnKC:IOO7N2n44ZN0T","tlshash":"fc816c4497620c25c47e8e7839d4480df676fd68a0e06676e34215b8bd226ea7ee0b1f","first_seen":"2025-04-12T16:00:29.653463Z","last_seen":"2026-03-25T16:00:52.80824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/layer/layer.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-07T18:58:29.354259Z","times_seen":14226,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 09:21:56 GMT","end":"Thu, 20 Nov 2025 09:21:55 GMT"},"fingerprint":{"sha1":"8F:BD:BF:80:95:3E:23:96:AE:87:AE:CE:42:3E:7A:2A:6B:DC:A1:84","sha256":"F4:AA:2B:C3:1A:BE:1A:F8:E6:A3:2B:34:B6:0D:14:73:6C:B0:6D:0C:5F:99:94:A1:09:D2:D5:0A:D3:C4:6B:DE"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 11 Sep 2025 22:04:04 GMT\r\netag: W/\"68c34754-38a0\"\r\nx-psserverid: bp11b, 2025-10-21T20:19:30-04:00\r\nage: 325\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9924dac27d58783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-07-18T09:26:51.459283Z","times_seen":710,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Issue/details/Lang/en-us","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T00:24:51.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Issue/details/Lang/en-us HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:52 GMT\r\ncontent-type: text/html;charset=utf-8\r\nset-cookie: think_language=en-us; expires=Wed, 22-Oct-2025 01:24:52 GMT; Max-Age=3600; path=/\nPHPSESSID=79abtt3qr4l9kk5l8jsr537su4; path=/\nSITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nlocation: /Issue/index\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T03:49:02.788651Z","times_seen":17792495,"resource_available":true,"data":null}},"time_used":1281,"timings":{"blocked":502,"dns":1,"connect":247,"send":0,"wait":274,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Upload/public/629a22523fe41.png","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Upload/public/629a22523fe41.png HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jun 2022 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"629a2252-1112\"\r\nexpires: Fri, 21 Nov 2025 00:24:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 119, 8-bit colormap, non-interlaced","md5":"6d01963c615ea3cc80cb6a40084651ec","sha1":"2afca9645c6adeef2555e6063a82a713b46e2bdc","sha256":"a529aecc234a560f74145932bfab3c519f488bf5a3a122a929745e16e7ec46a7","sha512":"9b7040781d4e84e221f61c3ae969afe2bdca7266667d8359c6edc58cfb8ed852dcdd7cf98f083d3c945f12aeefbe3bd503e5f4c9310af829f616b90c4ad9ac6e","ssdeep":"96:8dotJflpryR4QyKchJ3ZT9X5RsDvxGVCvXRrFQLtPQ3x:JFlS4MavTJrswCJaZ0","tlshash":"33917b451505af70e4063671a77977a0c373a697fee36309a05b68cbb32ba20cc9216e","first_seen":"2024-07-25T07:50:50Z","last_seen":"2026-01-11T19:47:31.814822Z","times_seen":54,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/js/jquery/2.1.1/jquery.min.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/js/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 May 2024 13:18:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6659ce21-14938\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"d021c983bd6e7291b43a5cc1fb2ebe99","sha1":"ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff","sha256":"c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079","sha512":"0b01d408ae79a4e3630f1bcf6507aec0aa71a2cf263f212ff601ae582f15af4df9ec9dae5e0d4fc9c1833cd0fd1207689121531ba920480a680e3f4e336da4b3","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa9G:7NMnJiz6oAQKP5a98HrB","tlshash":"5983d6d9b6c27062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-08-07T18:39:45.815477Z","times_seen":10275,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/jquery.SuperSlide.2.1.1.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Sep 2021 13:34:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"614f2572-2c9e\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855), with CRLF line terminators","md5":"0b9bc63ab05e21e3830da5bbb4ccee67","sha1":"d162156bdaf14217d76d920e0e57b86d8feb1d97","sha256":"349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848","sha512":"bdfa220da1f08e29f05a9984c4999d7e742bea10ad86b7e497a0d112c7992cc52b7f1e9f5430b4286f14bb2336110f85cbdc3164a92121caaf5c91961f7e69c9","ssdeep":"192:j+K3bxH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:jNcnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"9532c65fb66635ca4597b3f1107f940d222b5965fc8a8ca0b17082c0adb9a1c243bfed","first_seen":"2023-04-05T11:06:31Z","last_seen":"2026-08-08T15:12:17.717897Z","times_seen":14271,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/favicon.ico","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 870\r\nlast-modified: Fri, 11 Oct 2024 15:02:30 GMT\r\netag: \"67093e06-366\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"902bacdcf9631d11935484151497a89e","sha1":"6deea128d9c1ee1f79a24490de4d3975392627f5","sha256":"d31e282ffb3bb5dd30928d26363a710a61d3909673cfb551f10195517c34e30b","sha512":"b013a81d9c0de582f369f33e8652445946f6ad9cfc4c432d75c1ec620964315f7c8bc4fd4dd52c8214a92592317344bfd8822e6b2a49215a1d9cc1666b17c911","ssdeep":"","tlshash":"2011b3c22212c82fd4429033fa21108082a71ad09c6e1a833513e33283509f039edf18","first_seen":"2023-05-12T00:39:23Z","last_seen":"2026-08-07T04:16:59.417157Z","times_seen":845,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1761092695403","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 09:21:56 GMT","end":"Thu, 20 Nov 2025 09:21:55 GMT"},"fingerprint":{"sha1":"8F:BD:BF:80:95:3E:23:96:AE:87:AE:CE:42:3E:7A:2A:6B:DC:A1:84","sha256":"F4:AA:2B:C3:1A:BE:1A:F8:E6:A3:2B:34:B6:0D:14:73:6C:B0:6D:0C:5F:99:94:A1:09:D2:D5:0A:D3:C4:6B:DE"}}},"request":{"raw":"GET /js/14ph9clmah1mx168y6sdo7lcsa/safe-standard-sync.js?ps_h=OiyG\u0026ps_t=1761092695403 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9924dac27d47783d-OSL\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 29\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nx-psserverid: bp14b, 2025-10-21T20:24:55-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1199), with no line terminators","md5":"6572a51bdaf6851ef3978d3bdc48e346","sha1":"47bf1994dcd8c975943999e41c8c4fec63aa46f2","sha256":"2ab70f797fc234ab9dedfdf8bd3d754fb1745f3b90dc015220e50a548e984c7e","sha512":"5c0632b64f805518c38a0b5bcae483c75050c29e1d66c2563c7729109032ef22f9f9fb27a483a834d5766fe6f2b6bc0c415c4c1988ea9dcc69e8f95ce42ff4d5","ssdeep":"","tlshash":"b021f1774608237a42052df7e57f2e0eda32185faae9c7d9c4344e51106e73af4319e8","first_seen":"2025-10-22T00:25:19.113944Z","last_seen":"2025-10-22T00:25:19.113944Z","times_seen":1,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":455,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/mods/rvmShowPoweredBy.min.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 09:21:56 GMT","end":"Thu, 20 Nov 2025 09:21:55 GMT"},"fingerprint":{"sha1":"8F:BD:BF:80:95:3E:23:96:AE:87:AE:CE:42:3E:7A:2A:6B:DC:A1:84","sha256":"F4:AA:2B:C3:1A:BE:1A:F8:E6:A3:2B:34:B6:0D:14:73:6C:B0:6D:0C:5F:99:94:A1:09:D2:D5:0A:D3:C4:6B:DE"}}},"request":{"raw":"GET /sjs/mods/rvmShowPoweredBy.min.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 11 Sep 2025 21:03:40 GMT\r\netag: W/\"68c3392c-501\"\r\nx-psserverid: bp14b, 2025-10-21T20:24:49-04:00\r\nage: 6\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9924dac55fe6783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"7110cae4c968efc9ae4c1a4745223a7f","sha1":"decb9d1fc4504d27fe26180a840b10c9126ef20e","sha256":"afb55b520aa2e465660b3bef375a1b6588dff64d4e5c6d5bff5b410259e3ddd0","sha512":"819e1a78d041ab71387abcd812fbffca003c4d71748d1979e92cc1005e104cf5a10f24c5c1e52f75b473feb5e235eab05e461435274cb1197c14eb4c54d141aa","ssdeep":"","tlshash":"f421a817c4a13118f76b50715a72f22f30e4412d168b464863b8fd3da398cf312de259","first_seen":"2024-04-23T17:51:44Z","last_seen":"2026-06-06T06:33:26.71062Z","times_seen":634,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Issue/index","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T00:24:52.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Issue/index HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: private\r\nx-powered-by: ThinkPHP\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ThinkPHP","description":"ThinkPHP is an open-source PHP framework with MVC structure developed and maintained by Shanghai Topthink Company.","website":"https://www.thinkphp.cn","common_platform_enumeration":"cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:*","icon":"ThinkPHP.png","categories":["Web frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1645), with CRLF, LF line terminators","md5":"b3f286f7166029dbc7c79bb73ae6a874","sha1":"43119e894e831b1ba55a71b2be6d903bf8890180","sha256":"788deeb5c3091943bcb5cb10e3fa1efa6a92afdf44ba007fb8863ef76f7eaca4","sha512":"06e9dd95dbe28eb7f5e15adc3910183805823e3b7751ed17299dbace32553b03eccb3e872074c9ce3a1dc2cff4e606bf555d0818b50d57663d205fba3c875751","ssdeep":"768:OWagS9oGkkhX3KkyBVfkxRkXYvkSmk25nGIHNQAyjQAT13dhVadyq2FtRBEny9Dr:E3/dBgEPrc1hdH+AXyrXjmvXpscu","tlshash":"f353ea51e35c5e3a2232409b97a551e6fa36a437333b81193d7e83751be1d389a333e8","first_seen":"2025-10-22T00:25:19.117255Z","last_seen":"2025-10-22T00:25:19.117255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/bootstrap/fonts/bootstrap-icons.css","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/bootstrap-icons.css HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 31 May 2024 13:17:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6659cdcf-edbb\"\r\nexpires: Wed, 22 Oct 2025 12:24:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-08-08T21:12:05.230322Z","times_seen":15179,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/imgs/hot-2.svg","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/imgs/hot-2.svg HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jun 2022 14:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62a35380-1ade\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd9279cfb541640afabd1d33527f1df4","sha1":"6d828472cfaa863044b92e5c884ea8d658df4d36","sha256":"6466ed8936ba729058d7e2ae3bc93a7d8f3fb8ec385d7e3c29f21968cbd5aaef","sha512":"53a3ddf98f9ea97b18e73e5ca308a452a16142e672dcf3d1c86e61cc83e94729651eb41301bc902cc2510178e0c708fb5b66f3bf1e4ccde0fcf5f61aff77fcf5","ssdeep":"96:QRslJ3A7/H2wd9Qci3A7/H2wd9Qccra97a9tx+duKNBBbNwKDNlUs7vkSqD:QWS/Zd9z/Zd9ia97a9tKblLs","tlshash":"96e197f7e1b8b993d246c771ed52485528aa84fbeb810391c2e8ff9a6135cc04c4edd4","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-03T02:44:22.699192Z","times_seen":5116,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.staticfile.org/jquery/1.10.2/jquery.min.js","fqdn":"cdn.staticfile.org","domain":"staticfile.org","tld":"org"},"ip":{"addr":"27.124.9.124","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 04:57:54 GMT","end":"Mon, 22 Dec 2025 04:57:53 GMT"},"fingerprint":{"sha1":"86:EC:EA:70:D6:06:5F:AD:2C:79:26:7F:D9:1A:D6:F4:DE:FC:1F:EA","sha256":"87:20:20:30:F4:78:B3:65:55:85:01:A6:70:DF:28:E6:A7:45:1A:13:F0:84:26:C2:EC:F7:28:73:4B:AC:EF:39"}}},"request":{"raw":"GET /jquery/1.10.2/jquery.min.js HTTP/1.1\r\nHost: cdn.staticfile.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 22 Oct 2025 00:24:54 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nx-cache: BYPASS\r\nx-cdntype: readnode\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-09T00:03:10.48845Z","times_seen":21928,"resource_available":true,"data":null}},"time_used":1657,"timings":{"blocked":652,"dns":1,"connect":326,"send":0,"wait":338,"receive":0,"ssl":337},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"cdn.staticfile.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/imgs/bannerissue.png","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/imgs/bannerissue.png HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 May 2022 18:49:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6296633c-64472\"\r\nexpires: Fri, 21 Nov 2025 00:24:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":410738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 320, 8-bit/color RGBA, non-interlaced","md5":"252c2b8dd1a4366d31b86bc4334cc01b","sha1":"8486a928716276733811650d5f9575e87754a593","sha256":"f11d14a4fbc0d59561b1f837a40e5ad6ee22cc3fe30a8210c5e39f691c4bd05d","sha512":"382b1dbf9dd5bc7901b6a1c5fd73b313883b030e144ad585f97816c72a1b2c11e7bfa1aa6bdce9d860e9374114e93b715cb38746e094f813e2cd47cf4a03000d","ssdeep":"12288:fdCODzubptusC2vFd5ucRH3/QL5Q0aaF9MO6:FFzubXuD2lTvY3aa6","tlshash":"dd942317c3f84635f034db7b98023d782abcc9d4cb91e73d9073c686276424dada6a5a","first_seen":"2024-07-31T06:30:47Z","last_seen":"2026-01-11T19:47:31.810602Z","times_seen":104,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/font/cb/Cb-Sans/CbSans-Regular.woff2","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/font/cb/Cb-Sans/CbSans-Regular.woff2 HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Public/Home/static/css/base.css\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40480\r\nlast-modified: Wed, 22 Sep 2021 23:23:01 GMT\r\netag: \"614bbad5-9e20\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-06T06:42:12.233576Z","times_seen":1608,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":495,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/bootstrap/fonts/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Public/Static/bootstrap/fonts/bootstrap-icons.css\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 106812\r\nlast-modified: Fri, 31 May 2024 13:16:33 GMT\r\netag: \"6659cdb1-1a13c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-08-08T21:12:05.244352Z","times_seen":10535,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/layer/skin/layer.css","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Feb 2021 23:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6025c42e-36e0\"\r\nexpires: Wed, 22 Oct 2025 12:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"1673a003559ea1607dd77e6467a4baed","sha1":"954f4afa17e3d1c057101e62950f6c9506245550","sha256":"9748f440829e0b76d70f344e9c989f6d2302eba81aeea03211d40ef5f29fe62a","sha512":"5f9b8254fe18cdc329ca87a4852b7cb5520dcf3c406c5b3d755e99d0e7ddd618cd5ca2b455868ae14d896431cea2252b60d79d5fdd9e404a1fb8685a05ceb955","ssdeep":"192:9OcW0PmLeWVNrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijV1JbTyGY5CGX","tlshash":"1c5202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:37:37.344268Z","last_seen":"2026-08-03T02:44:22.615907Z","times_seen":3284,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Static/Icoinfont/icon/icon-5.png","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:53.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Static/Icoinfont/icon/icon-5.png HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 998\r\nlast-modified: Sat, 08 Apr 2023 01:29:46 GMT\r\netag: \"6430c38a-3e6\"\r\nexpires: Fri, 21 Nov 2025 00:24:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"dd355f60dca146dd4b16c95508f71746","sha1":"51aabb04c6554c3ddaa88f52e2e3954adb3245e6","sha256":"c32665760096c7ecc9bdf128e465a7219fc835ed59a7eee0ee22026cc07dc82b","sha512":"184c1021253532d5e6f04ecf2c69ea9257b3981819d93c68ce1c7969f51c960586af716a3a4d1e2f65996b764b7ac2a0acaf41be597dcfeef68896b5529b8d72","ssdeep":"","tlshash":"3c11a58cfe520cb7ea9a55609259909e7213932016075318a0fea62b3bcf41ad662b82","first_seen":"2024-05-07T20:35:50Z","last_seen":"2026-03-25T16:00:52.833285Z","times_seen":78,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobbeetty.top/Public/Home/static/js/layer/layer.js","fqdn":"cobbeetty.top","domain":"cobbeetty.top","tld":"top"},"ip":{"addr":"103.108.41.18","port":443,"asn":135581,"as":"19 Chun Wang Street, Tseung Kwan O Industrial Estate, N.T. Hong Kong","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobbeeaas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 09:30:59 GMT","end":"Mon, 19 Jan 2026 09:30:58 GMT"},"fingerprint":{"sha1":"42:F6:7D:02:4D:18:0D:70:6E:DE:AB:84:AD:11:FE:E4:6C:D5:2E:DD","sha256":"28:36:02:E0:B7:91:A6:FB:7B:27:25:B6:8B:EE:F3:B4:31:75:0C:B2:34:94:CD:61:17:50:42:5B:86:C8:E9:F4"}}},"request":{"raw":"GET /Public/Home/static/js/layer/layer.js HTTP/1.1\r\nHost: cobbeetty.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/Issue/index\r\nCookie: think_language=en-us; PHPSESSID=79abtt3qr4l9kk5l8jsr537su4; SITE_TOTAL_ID=a1c7a7721be42259a959c068b81d3f33\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 00:24:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Sep 2016 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"57ee1b30-4d83\"\r\nexpires: Wed, 22 Oct 2025 12:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752)","md5":"666f4437565d197e9459e19a29f58315","sha1":"afc5c0a1369137e52b37ad5fb63f48202ce31368","sha256":"4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100","sha512":"1e659ff6c47458dbbaf7e7561402c12441286c255ddec048bf654388e8666a9ceca344e166657c29fce4a08b46470b44c47e8f1c6f577adc2a4e4f4f0e7e1e90","ssdeep":"384:DQ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:DQtu8CfS793QODbcI","tlshash":"5f92c85ab5503593216390a9911fa90f30f24d22eb078958f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-11T09:52:52Z","last_seen":"2026-08-07T18:58:29.354259Z","times_seen":14226,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"cobbeetty.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1761092695911\u0026ps_l=https%3A//cobbeetty.top/Issue/index\u0026ps_r=\u0026ps_s=iMHa67huqiGtVdQm","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"172.66.153.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cobbeetty.top/Issue/index","date":"2025-10-22T00:24:55.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 09:21:56 GMT","end":"Thu, 20 Nov 2025 09:21:55 GMT"},"fingerprint":{"sha1":"8F:BD:BF:80:95:3E:23:96:AE:87:AE:CE:42:3E:7A:2A:6B:DC:A1:84","sha256":"F4:AA:2B:C3:1A:BE:1A:F8:E6:A3:2B:34:B6:0D:14:73:6C:B0:6D:0C:5F:99:94:A1:09:D2:D5:0A:D3:C4:6B:DE"}}},"request":{"raw":"GET /cmd/14ph9clmah1mx168y6sdo7lcsa.json?ps_t=1761092695911\u0026ps_l=https%3A//cobbeetty.top/Issue/index\u0026ps_r=\u0026ps_s=iMHa67huqiGtVdQm HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cobbeetty.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobbeetty.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 00:24:56 GMT\r\ncontent-type: application/json\r\ncf-ray: 9924dac57ffc783d-OSL\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 29\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://cobbeetty.top\r\nvary: Origin, accept-encoding\r\nx-psserverid: bp14b, 2025-10-21T20:24:56-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce33080b5c32e9a112da47c27b074f72","sha1":"7f8a374b0bef60327a18ab1fdd9cc459c5185526","sha256":"c69f9256ca3a89dbdbf2063f177728e38f6f5e2c383f01bd2aa84716aad4b296","sha512":"9281c915fedd5d977deb662f36a5b5b03ff27cc582921afb8d70cbe7fde501ca8e9d71e6be6a293453889fa9696f758057d4ea2d3bd371387f748e3e28eec0db","ssdeep":"","tlshash":"9390008c88e338ec00088b22ff82030ac3200caeb008fb08c2a00a0230cb3e82030003","first_seen":"2025-04-07T11:37:33.935595Z","last_seen":"2026-08-02T02:08:52.158793Z","times_seen":436,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}