{"report_id":"6fc5daf7-873d-425f-9a5a-4e861fa25d61","version":0,"status":"done","tags":[],"date":"2026-07-01T01:49:00Z","url":{"schema":"https","addr":"hjc297.com/","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hjc297.com/","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"title":"HJC黄金城(中国)有限公司官网","dom":{"size":8578,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"074590d0f6496b458462cfd758602f0a","sha1":"5afd57aafa678e795cb3258bba5f310f9cdad9a3","sha256":"2f5f8631332013eafdde43a73e898193d8852ab87eda111aebb53a5512982340","sha512":"500ac88c8b0176bd22e8e995ab34ef2769fb7507e856aa6d328867dfc4f001c4b31159cc8231639d7e1dd67141926e1020b41e5397280fe6cc651da63bf0558e","ssdeep":"192:jcSfrnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sAAtg:gjmX7AAtg","tlshash":"6702762761e3155b2932d1a66fe31b1b6764d407c20bc8997ecc15cdef89ac9c8a338c","dom_hash":"domhash68151781dee7f7d6b79191cedd0be75b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hjc297.com/","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T01:49:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hjc297.com","ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-07-01T01:06:39.531161Z","last_seen":"2026-07-01T01:06:39.531161Z","alert_count":108,"request_count":27,"received_data":2396002,"sent_data":13398,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"154.204.28.54","ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":195637,"sent_data":4983,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-06-30T11:50:17.538172Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":452,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hjc297.com/e/dongpo/tz/tj.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","size":808,"data":"","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-17T12:36:29.620596Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c52def50b4625457b612d48b35f6bfd","sha1":"53d73ef2c1837be480abe686bc56639283187ee1","sha256":"db05bdfa1dce37f0c4a7cbd54bdd3fe0e690e29b6fa35d2e237fa321ad325bfd","sha512":"7765c1fa18a1b983fec9b9bc721a91de17e584dc34ac3fdb953b7f7c3cff9763baeb11440597c75c9e85d3404a2785fc4acef1adc30fd090c2037a5f112f4f6f","ssdeep":"","tlshash":"19119e6edc51a168a6c328b89b9bd688d16e1025d109c803a9d9c5ce2c38fc4042134c","size":981,"data":"","first_seen":"2026-06-30T21:38:34.147056Z","last_seen":"2026-07-16T23:58:47.501316Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/js/link.js","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"101a674dd5716f2cd4e9400eba030307","sha1":"3720e039e009066637ac728995b796acc5c8730c","sha256":"b79f7a47563f648e2952c2b43ef5bed7f80c43e28e2b474d6ecd064c7d972053","sha512":"b016441152d0a6d0ea15dfc7b9602ff47f0c3de78c5e930fbf2d5a91fcb5620caf7a83190bf9eea7dba10a99e8a6f0d9220bebd478b23c074d22ce369f74c142","ssdeep":"","tlshash":"b731c059e6d029260d1749a7a99b2c14b593400fbc0aec43f79d4ac0efb172f4b7ace4","size":1703,"data":"","first_seen":"2026-06-30T21:38:34.12277Z","last_seen":"2026-07-01T02:05:27.806262Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/e/dongpo/tz/tz.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e90b40e341d8e199b10803a19634a0e","sha1":"dea84dae4529c9734e70e0f3eca7a5d58a0d2e24","sha256":"c014f82660068ddc4783f5392682db2c3fb4cea453ff7ad8be3aa4ff556348f1","sha512":"8d7702caef7efc58f040c8983aafda8fa7b4cd27dc16e70c046b7f700aedde05ecaa8ec93ec544037a1f9f14f5f96e1a43ff441d6d69851d6e111ef1b27ab6e2","ssdeep":"","tlshash":"52215c7f9e631154d11691592bba676c3e3a001b6701cc307afcbe685f92f429447bd4","size":1158,"data":"","first_seen":"2026-06-27T01:10:58.521887Z","last_seen":"2026-07-01T02:05:27.787173Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-17T12:36:29.62573Z","times_seen":2625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T13:41:44.804703Z","times_seen":5342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/js/home.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-17T12:36:29.598475Z","times_seen":1220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge5-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.793Z","timestamp":1782870509793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge5-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94876\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-1729c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94876,"size_decoded":95149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 832x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"375988c1e8b601b444ed09248eb32bd5","sha1":"ec7116fd31034284a40b87c425963aa709671f91","sha256":"87d5c2f552d49b160f40d59e6d6d28cb92ea22025278262c44ff9cc34a1bcf7d","sha512":"652e1cb57c8cf7c0c1399e6c0a2ca7e26181ae553f772f80564a8d097c6cd92eb12cc633f3344ff042e7894cec64776a6c57507c2797f44d120d2011a0dddc70","ssdeep":"1536:WSeBVc9dhNXAR7wcNQig9m34cZZ9vajby2rRwRLmBUp/STkh/kQhXcin60I7nV2D:WSeLEdhyScNQig9I4cZZ9ynygR8mm8T2","tlshash":"8293129df368e577e68bcee9f72003b8563d5a78c7332ba0646a05c501818e1f4b4c5e","first_seen":"2026-07-01T01:49:05.864949Z","last_seen":"2026-07-01T01:49:05.864949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":1486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.762Z","timestamp":1782870509762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jul 2025 05:41:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864c69c-13bb5\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80821,"size_decoded":24420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-17T12:36:29.62573Z","times_seen":2625,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments2-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.781Z","timestamp":1782870509781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments2-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111666\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-1b432\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111666,"size_decoded":111940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 697x464, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e171252e9a40296d33a5dd61ffbe3861","sha1":"b79d3c86b7c8a40a6617e84c2f508d20405c30a9","sha256":"e180b35ba86261c8db958a03002d897eca5a7b6579fe51fb68eb2fecdf115c43","sha512":"1049e361157483a3c6a68ed9a308726271a6013fc3edc14149e344ba47e689cbf246ca18241e8616dbcd1be8fa04d04d84eecbae7780733d375b9afbf8022b99","ssdeep":"3072:IGmI/XZdWxockeOKGtBdZ2ovkU83K1rdWJLvAm:IGJfZ8xocsKSVv40JWJZ","tlshash":"d8b3129613cd5a5ea1db73dca46cb388fc15f33a9b3368ad2c62a006180fa9554d57e0","first_seen":"2026-07-01T01:49:05.869486Z","last_seen":"2026-07-01T01:49:05.869486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":895,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/js/link.js","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.092Z","timestamp":1782870512092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/js/link.js HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 30 Jun 2026 09:56:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4392d9-6a7\"\r\nexpires: Wed, 01 Jul 2026 13:48:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1703,"size_decoded":996,"mime_type":"application/javascript","magic":"ASCII text","md5":"101a674dd5716f2cd4e9400eba030307","sha1":"3720e039e009066637ac728995b796acc5c8730c","sha256":"b79f7a47563f648e2952c2b43ef5bed7f80c43e28e2b474d6ecd064c7d972053","sha512":"b016441152d0a6d0ea15dfc7b9602ff47f0c3de78c5e930fbf2d5a91fcb5620caf7a83190bf9eea7dba10a99e8a6f0d9220bebd478b23c074d22ce369f74c142","ssdeep":"","tlshash":"b731c059e6d029260d1749a7a99b2c14b593400fbc0aec43f79d4ac0efb172f4b7ace4","first_seen":"2026-06-30T21:38:34.12277Z","last_seen":"2026-07-01T02:05:27.806262Z","times_seen":7,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/xpjpc.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.109Z","timestamp":1782870512109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/xpjpc.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-5800\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22528,"size_decoded":22646,"mime_type":"image/png","magic":"PNG image data, 183 x 55, 8-bit/color RGBA, non-interlaced","md5":"c53d923594566be7e0e41e8d720c0ac0","sha1":"e16a4b701d10291bbff90178e8b0d5f576e00821","sha256":"021994557d1d9642fdc16a0d8f6e471bec81bea7f366de6ef631f536c165418b","sha512":"554f7d6d44d26905610a65e21bd157ec30fef501c356e97787deca22f9089216f59e284f0effab7b18da89134af594d4ffd5eed889b1b5a4d5a5412456b9832e","ssdeep":"384:QfchEzlZmrXTjUDkJe2tERBxq2ceTdr1lFJ3d2Oo+UQSYJshjRHXvcQ:QfchEzrmrXTjUhP42cKpFJ3lo+UHYa//","tlshash":"fba2e0f1f36ff1b54a924d554cf8e2b080978942e088ee6135cb204acade8d31d993e7","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-07-17T12:36:29.604807Z","times_seen":982,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/tycpc.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.115Z","timestamp":1782870512115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/tycpc.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-4d7b\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19835,"size_decoded":20210,"mime_type":"image/png","magic":"PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced","md5":"9cccfc8ca4e4f50e4155a906a42666cb","sha1":"6687ef39ed3ba532124b8155234e819655ac0827","sha256":"38fa753bd6894fd8b0fdd94ba7e7bd9da32cb1e58017c44ce0147afba97b4841","sha512":"4e5e74b92841a16efc4cad516894bdaa1eca4ccdca290bcb36bbaa68cbe2011a6d12005f5bc2946532bbddc4e73161589ab3a296a734b78ad12aaa540bed9cca","ssdeep":"384:nC4JlgpsDv49JmGFnsvbCU5jAEVzJ0smbzRgZGme584WLMM0tq5PHcMV:Ccw9J9FybCUTzJ0smbZhwPH5","tlshash":"ba92e1cc99b518a51940f1dc2f338a48cfe9112c29e58776b1d377a2d94ae6f307c60b","first_seen":"2025-02-07T02:11:03.006958Z","last_seen":"2026-07-17T12:36:29.61306Z","times_seen":838,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.752Z","timestamp":1782870509752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 14:36:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686d2cf8-4691\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":5190,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T12:38:40.957399Z","times_seen":5987,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments3-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.782Z","timestamp":1782870509782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments3-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 143646\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-2311e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143646,"size_decoded":143920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 809x577, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ffd35034222dead32db681b15261758","sha1":"3c27cb8eef99461eef23123f712530941402a26f","sha256":"7824eb22da35cd3e23e9e4af89e95bf49e8c013b3c71648ebeae2a3da460c140","sha512":"24c9e828f586406f0594572a828e5ea540d95f69f1783962827a4fc07261f7e636fbe9c654e91e5b588410d99db07ada34b2156f1d00bcf3a27103228b1db985","ssdeep":"3072:pN19QQ2J/elkRIaFITFdBtgcaPf5dZrhgh7p9TEut/:pN19QilqIaFUFdIc+f57rqhplN/","tlshash":"26e313f57140827456128a7253ada8f7b411de2b19bda20e314dcae1e8d3f1e027ed7a","first_seen":"2026-07-01T01:49:05.876058Z","last_seen":"2026-07-01T01:49:05.876058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":1487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge2-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.789Z","timestamp":1782870509789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge2-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86864\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-15350\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86864,"size_decoded":87137,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 752x423, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56c48e750c2fc9b1c583156f3563ab0e","sha1":"4d72495ab3c27027daa01e486656a052d3391daa","sha256":"f32afb7e9cac973b436bac688c589861a0589424de3770bbd21022e6b1f983e5","sha512":"938d5dc890da75dcfa4d0b588b5d98f3184c7069fcdd1074b7c9dfc6cbd265f5d0b61469eb3e7f1504234494007b718b302e91151cf10029d7acccee6ecef37f","ssdeep":"1536:FqR/ujkFAWMu4sXbWJbl66C6ZDFmaL3K1e7z5cjvA83qmjZ6xpUoJGaOm0wSRLc:FiujkbJ4sXbWJbl6mZBmam0vMvA83qQo","tlshash":"0f83120293a48d16ae03e5cf5ba486972bc2104325bf6b3f39545ad3b960f53285bf6c","first_seen":"2026-07-01T01:49:05.878565Z","last_seen":"2026-07-01T01:49:05.878565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":1486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/footer-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:30.637Z","timestamp":1782870510637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/footer-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125506\r\nlast-modified: Tue, 23 Jun 2026 19:05:24 GMT\r\netag: \"6a3ad8f4-1ea42\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125506,"size_decoded":125780,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 781x520, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2d9e0cf4a5fc5eca3796f0475da112f","sha1":"478fe8bc3f2f702592d7badb0faf955fd31c4a06","sha256":"17f2c6867ca92a1b901d92f34ef48c077bfc8e78729f477bebcbcc7b7b0b260d","sha512":"ed1ab0179b0f65350fd1c6a80a897eafdfababfcccbf4a95afb25fdf3643df3f8cd0d91bc0634c03b9b43cba70a7c40eacb5aafd35a45aea40bee6086170f428","ssdeep":"3072:/D0nUDwBkoTOLix3EH5Fain717al1PQvxCfOW:/AnUkBkoTV0HzainBk1QvxCD","tlshash":"7dc3122f87dc5674700a4671f2fa1aad30f704a490c243a7a7d692ea1eaf8487c4df4d","first_seen":"2026-07-01T01:49:05.881029Z","last_seen":"2026-07-01T01:49:05.881029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":864,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge6-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.794Z","timestamp":1782870509794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge6-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119204\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-1d1a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119204,"size_decoded":119478,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 778x437, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56d361e6f09d19c2f326e45607232937","sha1":"c1924149ac8d23ddca0e287db4da2e7d3cf5c7d3","sha256":"62cadcf6c2bca75edae203f623093a076f9cf7c53a3cc1043c441dad249563e3","sha512":"61d1d11f8fe742031511fe127ba46ed8bd2894b7a32367223bf7f115a8af337cab67f676d8bf5bf6d394e2cbb0cbacfb0856cfdfccc91f705fd2c2d128509139","ssdeep":"3072:8OP+Hl+f5cTgkSj8ewPj5d/q9UEiFytZuxbAK:8OGHlRTgL4HdcUEi7bAK","tlshash":"9cc31257a04a9a43efbc11f95a3cceba3f3543dcaa1cb76005b2195423137dc2eb59a0","first_seen":"2026-07-01T01:49:05.883234Z","last_seen":"2026-07-01T01:49:05.883234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":1486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/wnspc.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.112Z","timestamp":1782870512112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/wnspc.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-1eb7\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7863,"size_decoded":8238,"mime_type":"image/png","magic":"PNG image data, 172 x 60, 8-bit/color RGBA, non-interlaced","md5":"6e6f3e6c749737e6c347ec25d39b3eb1","sha1":"076c805bf394c7996a58202e333827837c8b1378","sha256":"391138ddf53bc321563b3d17fe0f37f5b40efba65fc661dbfa239a2b2184ec65","sha512":"b4621a8e30b49a48b1b13e9582c260b02d42ab2cc2509d59e56cf85028eec3dd165e255dff5c61e689ad8b4eaabe74852185efb2764da5c0ec1133a2ccb02a3d","ssdeep":"192:FQSFq7yL2y34yuuSzYUfBY2kCf9pDnA3+O07Zu86U9S0aN:zFjLX3u1YU5sCzA3hEu86sSLN","tlshash":"26f1ae6b1553fcb469dda7e92063af6082136f48b0077a12fb2b29748135fe5f44aa13","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-07-17T12:36:29.606045Z","times_seen":866,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/dafa2.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.117Z","timestamp":1782870512117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/dafa2.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 05:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e9211-880d\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34829,"size_decoded":35166,"mime_type":"image/png","magic":"PNG image data, 299 x 79, 8-bit/color RGBA, non-interlaced","md5":"cd8c9178b347f37c9bef76b8f675e3e0","sha1":"1e14408dd2512718208a674236ebbcb4442d3bef","sha256":"488ecf2fc34918b7a5e0c41b0538b6a6907d7f2f84e5df8e367b4b25f5efe454","sha512":"01b8e067c463405404750d9d892b5f6c1dbfd74d19800e7acf0bfcac4d2ed9d0ab7769788b68e518d4e2c31185829696b620b25d562655848747ac4df98395c6","ssdeep":"768:1KEXfnummCpkmHFV6NACX1aXu45xX6piNtn8MMIpO2jQ115gd8Wy:1Kmfn/mm0XcX/96wNtnDO2jQDOdFy","tlshash":"10f202dbfb6b16e89d851b6c21966c0c02c7869bc7fa94f1943a0c3256dce05a97cf90","first_seen":"2026-04-08T23:53:33.224031Z","last_seen":"2026-07-17T12:36:29.582511Z","times_seen":257,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/ico/favicon5.ico","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:32.209Z","timestamp":1782870512209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/ico/favicon5.ico HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Wed, 09 Jul 2025 09:42:24 GMT\r\netag: \"686e3980-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":17232,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"083803ad77955424dab8b2cf425eaf85","sha1":"aed4e90738d9811e26cd1c2ce7e1f083521e88dc","sha256":"a3e801a31d72f109f4e362757e923a43537fa4e3236abc99bc9909b5874dc3f3","sha512":"1fc8188ac1578959032826b3f893d8f8eaf7a4665a8ad0d4d3b1dc594a7818e36363f3c8c12ad0b5c37db312e3c36c28a85a6abe2040308f993454d08fb25da9","ssdeep":"192:rQlOOOehwmXmFGhDXlPXiYN6TQqBNU6sTQFdw1TtyAwj91exIre:MZwMmIhzlvig6suNU6yTxVwjCxme","tlshash":"a072fd147acdca19c5a9a6fc0ce2d32d795f0a951ee24e768f723947a5b4e04dc08c7c","first_seen":"2026-05-04T09:42:18.68709Z","last_seen":"2026-07-17T12:36:29.624884Z","times_seen":15,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:30.946Z","timestamp":1782870510946,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/css/module.css","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.707Z","timestamp":1782870509707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Jul 2025 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6882e6d2-28112\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164114,"size_decoded":32362,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-07-17T12:36:29.597638Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/logo/hjc297com/logo.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.776Z","timestamp":1782870509776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/logo/hjc297com/logo.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3804\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-edc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3804,"size_decoded":4074,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f657b616804e2e1a4e33a0bfef7fd48","sha1":"94dcf9b7d7b4d0acfcec077b8d9b186bf3c1b67a","sha256":"48f5a23b1032880f6a5af017cbb6d633136589a2bd615e6d588fc43fceeadde7","sha512":"3fc50e391b72575afe310f307a8052037dc0c218b086858e0fe9c3911f43c365292617366eaedda08ec6e876408078c42706dca939108fdd2f7f48607b434a90","ssdeep":"","tlshash":"92715db6272fee2dec45e153fa5c45a390d9ecd04b83efc5569e0119c4e4e2c382985b","first_seen":"2026-07-01T01:49:05.890222Z","last_seen":"2026-07-01T01:49:05.890222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:30.703Z","timestamp":1782870510703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 13 Dec 2024 14:50:06 GMT\r\netag: \"675c499e-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158220,"size_decoded":158494,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-07-17T13:59:11.148192Z","times_seen":31845,"resource_available":false,"data":null}},"time_used":1391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":799,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/365pc.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.106Z","timestamp":1782870512106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/365pc.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2255\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8789,"size_decoded":9164,"mime_type":"image/png","magic":"PNG image data, 189 x 44, 8-bit/color RGBA, non-interlaced","md5":"e0c9d379cd4926e815abd7d25c32f5e4","sha1":"e9a1fb55262d96495f14da278c7242cc3fda956b","sha256":"7b50586f667edbeb0c3d573a44d40742354c385a2d7ae1971aa4b0173c11173d","sha512":"519aaeff0baab73e269e86413df78c8563728cb4b1f17e448877c4853a726df366f201b9e869078a4fa460517530a84b5ae9da4290511aeb4d0b93aecb9ac99c","ssdeep":"192:6ZTS99EegUNgEBTJ35PgUUxiKlqSvxV5mG5pqghmCoTHV0:2YzgogEr35Y7cK1YGmAMT+","tlshash":"1e02a0bc5a62079b3d1aa9f8172c54f1fdd070eb411f7c99947d201b0c68a1c83af4a3","first_seen":"2025-01-31T12:39:53.02929Z","last_seen":"2026-07-17T12:36:29.615146Z","times_seen":843,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T01:48:27.812Z","timestamp":1782870507812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27843,"size_decoded":7710,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"26a4fed6ff93f53032f084a3fbec2e9b","sha1":"edc1aa128bbe6e3ce865179eb267d9129352f790","sha256":"ebc5a78c1331ae8c34b748d7a99c89a51e469b6421b49888ed0b0c3ba43b581d","sha512":"083a7bb356e8af1bd85b4f42121607ec94204f93c51cef7aac1b2d90a6512d1a5e7738c0247a57408fae30c4f0176bc1cd707adff3134b093b82e2c905152aa7","ssdeep":"384:sqt9SI39SXV9Snln8lrMqJZjiWKd9jPm1TftJbBaf83QB9SBzbwi9:hTovkV8lwYiWKd9jQPcpMzbwi9","tlshash":"54c2743664f229b7019bc1e29a506f4a3ed5e91bc91b46417ffd4bc89f86c878c4321e","first_seen":"2026-07-01T01:49:05.894007Z","last_seen":"2026-07-01T01:49:05.894007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1581,"timings":{"blocked":-1,"dns":321,"connect":297,"send":0,"wait":366,"receive":0,"ssl":597},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/fontawesome/css/all.min.css","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.754Z","timestamp":1782870509754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Jul 2025 04:17:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864b2c2-1907e\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":23140,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-17T13:18:13.538072Z","times_seen":13016,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/e/dongpo/tz/tj.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.768Z","timestamp":1782870509768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\nlast-modified: Tue, 23 Jun 2026 12:07:47 GMT\r\netag: \"6a3a7713-328\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1159,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-17T12:36:29.620596Z","times_seen":773,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments5-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.785Z","timestamp":1782870509785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments5-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72558\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-11b6e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72558,"size_decoded":72831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 682x451, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"987bb2346dd644ea6ccb4969a8576ecf","sha1":"8137d03f05e6863d0f04afe71571f5e3a4f8ad03","sha256":"b0ac80c52b07e097dd72c412a0be2ec4d0b23823c815734da64d5d1e4011903a","sha512":"6f784efc67f1e5d0e70dbd4dfc19e9fc9556b58dee2d0cc05659a0ebbec1441b738175a7ab080336e3883f3bea5cc17e927602ef050455892417934a359b5754","ssdeep":"1536:FGsK4c4pyIfVk/Dd45u2qjSHlhZsw4LlfnXobtVOJ+gGQHoBVrvL:FG63yIdEd45/DHlkLlPobtGXHoXL","tlshash":"ca63020d857914e8f79b2d54f8118ee4e25835bce2d50ee04cb324569fbc70b52e9ea1","first_seen":"2026-07-01T01:49:05.897657Z","last_seen":"2026-07-01T01:49:05.897657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":1486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge4-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.792Z","timestamp":1782870509792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge4-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 134324\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-20cb4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134324,"size_decoded":134598,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 694x462, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc63b6466d13298c6b03c500202e0124","sha1":"8652b0e4f7a7d2ba710b09da5c1297319ffca139","sha256":"3f385a99e6ff7f81a6d433d905d082c55fddc9e086e8d5ae6029fd38c16f1c6e","sha512":"cfa3bfdb89fb4e728aa9bfebc87aa7a2d4434b801a93598cd5f9415073dcacf338b4d861b8451c4165afca107de1da3e78aa5686b101d0cf09ee8c882894c335","ssdeep":"3072:UvKRduaNUlmaHaskGHhmZLw5skSYMH+A9Q7gJ:Uvgdbw7HzBA0KkuFb","tlshash":"7ed3123da922de30e13b8d9d9e237cc3ae847388c81a15b5a11f03999371d6392c719f","first_seen":"2026-07-01T01:49:05.899648Z","last_seen":"2026-07-01T01:49:05.899648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":1487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/1552215839168.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.120Z","timestamp":1782870512120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/1552215839168.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 13:08:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2178c8-b63e\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46654,"size_decoded":46733,"mime_type":"image/png","magic":"PNG image data, 1125 x 630, 8-bit colormap, non-interlaced","md5":"3dda79b55c5295df032d46aa45a92091","sha1":"b943ea4cfedc16aaaeb004c35655279758a79d7d","sha256":"f4e477a563baefc7c098aa5d645cd9e01b357764c9e8b40da49b348d91065f39","sha512":"c67334c095889d88d11c3741ba2a350976091d6150a1f5a537c67ca689a55dac3ccc6ce46b6a40051cb463fd4cd97e4e2de13beb7252b550994c06d5ba370f15","ssdeep":"768:s2+3QKxRbzHyMivDCxNx6xCdeU//NCOtOGMP3ClUIEFIbbpez4L8ph18pXQmVRI/:strxRbeMJh//NCbalDE+pezt18ZQ6i","tlshash":"552302be9841a0c3ec485233df2b3c1a79efe9b75a3f7586205994181d721ca0154fdd","first_seen":"2024-02-21T00:22:35Z","last_seen":"2026-07-17T12:36:29.584712Z","times_seen":764,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.705Z","timestamp":1782870509705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Jul 2025 04:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864b2c4-38a52\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232018,"size_decoded":32163,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-07-17T12:36:29.596682Z","times_seen":2646,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments4-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.784Z","timestamp":1782870509784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments4-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 150554\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-24c1a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150554,"size_decoded":150828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 826x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f8de8b7f6227b0259a0ea73a046f7d7","sha1":"bf346cbc85f903b22c752c0c12c120c89f1418e7","sha256":"9507e1d346901dfaba457cbb6cea1d6b61deaceb2c3389277678d46a9284b8d1","sha512":"2be39af413f44ed4536e58d568b4d47ca0f3781d8913351f96c7456182c32cc8b28f7a80f4aef965e75ae4a1c13f50c5665758420741d16cf75be773b484722c","ssdeep":"3072:8bApIe+L+/+N33gfwohCTpVFzI5j8UfU9szrt3wYnhypUi39:HpB+i/2noo1bzIB17yt","tlshash":"1ee312f97c103a415916dc0188e8b427796e0877d89c31ff482ab7b539c7a09c7ab9f6","first_seen":"2026-07-01T01:49:05.903168Z","last_seen":"2026-07-01T01:49:05.903168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":1488,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/static/picture/jinshapc.png","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.54:11466/","date":"2026-07-01T01:48:32.101Z","timestamp":1782870512101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET /static/picture/jinshapc.png HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.54:11466/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-a334\"\r\nexpires: Fri, 31 Jul 2026 01:48:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41780,"size_decoded":42160,"mime_type":"image/png","magic":"PNG image data, 295 x 113, 8-bit/color RGBA, non-interlaced","md5":"1d2140363e0fda69f41537010f37ac74","sha1":"9f3791b6ade0a7966dee0253cb698564490e9440","sha256":"65ff8549228320f54f3d93e45194314c43c7cea541241876a57633bb5ac94f92","sha512":"75dd491fe42a57dee94c06e5e389323f0b32a584f3d0223845ea8f945ac9cff401e65cc381f4e8973dd78c14655abfff000186a770df78acddff35e6bb69fa86","ssdeep":"768:fUD/+JUtuV8Sp+uA5mBhYhXXy7I1VzKT26hq34ZhMNg1de0nGtXIIq5y7RYLIXK9:j2SYd1Xy7wVG66BvMNg60KXrsLB","tlshash":"3113f1a116d7074d278849fcda334deec406ab285d19b93ec5f68f34e3846c4d083a66","first_seen":"2025-01-31T12:39:53.036928Z","last_seen":"2026-07-17T12:36:29.599263Z","times_seen":842,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/e/dongpo/tz/tz.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.760Z","timestamp":1782870509760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 18:45:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3ec8af-486\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1158,"size_decoded":849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7e90b40e341d8e199b10803a19634a0e","sha1":"dea84dae4529c9734e70e0f3eca7a5d58a0d2e24","sha256":"c014f82660068ddc4783f5392682db2c3fb4cea453ff7ad8be3aa4ff556348f1","sha512":"8d7702caef7efc58f040c8983aafda8fa7b4cd27dc16e70c046b7f700aedde05ecaa8ec93ec544037a1f9f14f5f96e1a43ff441d6d69851d6e111ef1b27ab6e2","ssdeep":"","tlshash":"52215c7f9e631154d11691592bba676c3e3a001b6701cc307afcbe685f92f429447bd4","first_seen":"2026-06-27T01:10:58.521887Z","last_seen":"2026-07-01T02:05:27.787173Z","times_seen":26,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.764Z","timestamp":1782870509764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Jul 2025 05:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68661bfe-22512\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140562,"size_decoded":39953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T13:41:44.804703Z","times_seen":5342,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/hero-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.778Z","timestamp":1782870509778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/hero-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47998\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-bb7e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47998,"size_decoded":48270,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 709x398, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de5596d25d0d9daaa03a33d0fccd5cb6","sha1":"3c5d5505fb498f7a610fc297862075678dfb71d6","sha256":"6e589efa322587d49b60d1923d8b8069e0a4c55ee4a21befc7e931491a989342","sha512":"3e1d36c063a2db054ada3f74ae2b03747f3639ca4dc0198e7e42446ca2e8b21aa228426ab86c28d34abae9e73a02179c56459b5d1dc836c2b59fdbc9d70d4ded","ssdeep":"768:/Yv3+fTn1cDwM/khfrw/USGeJPCXt1q0HL8behVfGFIHCBd2LtcKmPz:afDwM/kq/0eJ0THomgMJUb","tlshash":"88230177dcce74c1ac6c83561dd03e3e9b92b6d0e49c4abbb45e8a0f9c59d039810463","first_seen":"2026-07-01T01:49:05.907195Z","last_seen":"2026-07-01T01:49:05.907195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge3-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.791Z","timestamp":1782870509791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge3-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51198\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-c7fe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51198,"size_decoded":51470,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc293248b07644675edc34a463c3a576","sha1":"63ad8a6b597bb5051d9dc92ff0efe1e5a15dfc4d","sha256":"a9ec963bcec2ba9c9395922481b4d86a7c4ba92bcd9f0ade37e365a8d849c8ef","sha512":"57a4190e95c2ff827bb89b1527fdf57c2b2d2937f55787eafc9aaf81c1f770e813d59ff2b9501c8ecf413af4dd0bd4e0049bc5c0a7e3423cd98ee6beffb53178","ssdeep":"768:FThkgdn+U7OlR+rn41FbWzW0gY+fWzUNK/YdDXbj/yBI0O2dft9wT0G5E:FTh13OlY41Fb6WrY+fBNKAVXGI0HehE","tlshash":"e93302284dd92d23b325fe0f71feeaba102914f135c1090e046785f25995f6bba7886f","first_seen":"2026-07-01T01:49:05.909244Z","last_seen":"2026-07-01T01:49:05.909244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":891,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.54:11466/","fqdn":"154.204.28.54","domain":"154.204.28.54","tld":""},"ip":{"addr":"154.204.28.54","port":11466,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:30.943Z","timestamp":1782870510943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 05:57:06 GMT","end":"Sat, 04 Jul 2026 21:57:05 GMT"},"fingerprint":{"sha1":"4F:E8:40:CE:6B:C0:25:1C:31:DC:06:C4:39:63:52:72:9D:86:2C:61","sha256":"26:27:1A:73:2F:0C:31:5B:22:F0:5A:B2:8F:2E:7D:B7:D5:AC:A3:61:AC:38:D0:C2:79:4F:36:E9:B4:93:24:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 154.204.28.54:11466\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 08 Jun 2026 14:50:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a26d699-2193\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8595,"size_decoded":3106,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4a42687d18258b360dcbde5591d2e2d0","sha1":"14a43ecfb7662cffb08dd6f3624b96804ff602b2","sha256":"1c384bd5aa2d6c7f1250053849fb8281f77a001d3898faca9de3366fd50ecef9","sha512":"fd40233ec3103cd24ff3fab0c4fc6f5efe88cb4e4dac659ddb66402cb1105c3d4b6b8428e9578baa2b7beeb92c7ff2c11e1ce560fba19cca3294e4a1568f6868","ssdeep":"192:3cSrrnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sAAt+:YjmX7AAt+","tlshash":"8a02852761e3155b2932d1a66fe31b1b6764d407c20bc8997ecc15cdef89ac9c8a338c","first_seen":"2026-06-27T01:10:58.501261Z","last_seen":"2026-07-01T02:05:27.804958Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":-1,"dns":0,"connect":262,"send":0,"wait":263,"receive":0,"ssl":528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/bootstrap/js/home.js","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.766Z","timestamp":1782870509766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jul 2025 17:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68754346-16aa\"\r\nexpires: Wed, 01 Jul 2026 13:48:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5802,"size_decoded":2098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-17T12:36:29.598475Z","times_seen":1220,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments1-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.779Z","timestamp":1782870509779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments1-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80958\r\nlast-modified: Tue, 23 Jun 2026 19:05:22 GMT\r\netag: \"6a3ad8f2-13c3e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80958,"size_decoded":81231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 565x375, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0dbf98e0e7f881ae534995eb892531f","sha1":"09498b198ea9d22dc7663d079363a98f7fa157f0","sha256":"a48cd41d2ca11a377026bf5e168eeb546836cc4a3bb4edb852519874b249103c","sha512":"0f3b69378445c2e430da5ebe0dbc42bceabbfac8af3c11d37ba9e0736a8eeebab28163670c09c8fd218f9282ea212f4835c8efa4866707da24365bc8141b3dc1","ssdeep":"1536:62hFy8I/328hfCBhYiZDlDPSZ4Gen9mJqFDgNt1L:6TFGKCBhY0lb64GecwxgPx","tlshash":"2183127486b63075546e26c8a53bdfe03742ac4b2d1d9fe092073e3831b3597f50e9aa","first_seen":"2026-07-01T01:49:05.912297Z","last_seen":"2026-07-01T01:49:05.912297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":894,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/departments6-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.786Z","timestamp":1782870509786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/departments6-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71512\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-11758\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71512,"size_decoded":71785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 554x311, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67d5365472cabfb21cb1bf0ac2b250dc","sha1":"94fbecb90a73c087a235817a677461b92f25ff10","sha256":"dca3f161111b31692f9673477550ca65b027ba8da06683bcdd4d72b4f76834a5","sha512":"05997de45df52ad18827431e52948933b12187b73ae230892fe8e3bcab2daff7b59bc083746a8522933da3e425e121a864afaf1721127642eeaef9eddc1115e0","ssdeep":"1536:zKaGPu+U9ENkGEbmmJihu7JKY+Stp3b4WVDPTxSdLUaxCRpsHgdo+El64czJi:zKaG7sbviEQY+2ZrgXSCgq+Euzw","tlshash":"2c631258fcbda8451300c4846fba2bbd4e5652b0c4c8df729ecd59d85d1b2d3f27a286","first_seen":"2026-07-01T01:49:05.914024Z","last_seen":"2026-07-01T01:49:05.914024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":1486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hjc297.com/skin/cover/hjc297com/judge1-5.webp","fqdn":"hjc297.com","domain":"hjc297.com","tld":"com"},"ip":{"addr":"19.200.15.103","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hjc297.com/","date":"2026-07-01T01:48:29.788Z","timestamp":1782870509788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hj8880.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:42:56 GMT","end":"Mon, 21 Sep 2026 19:42:55 GMT"},"fingerprint":{"sha1":"97:F3:B0:D8:FC:95:7F:D4:18:AD:04:E6:04:46:2A:7E:D5:F3:F4:19","sha256":"3C:8C:C9:D2:09:CA:03:B3:F4:96:76:37:7E:D7:8A:FD:D0:94:71:14:64:0F:D1:48:7A:AC:3B:52:8F:48:A8:DE"}}},"request":{"raw":"GET /skin/cover/hjc297com/judge1-5.webp HTTP/1.1\r\nHost: hjc297.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hjc297.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 01 Jul 2026 01:48:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144412\r\nlast-modified: Tue, 23 Jun 2026 19:05:23 GMT\r\netag: \"6a3ad8f3-2341c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144412,"size_decoded":144686,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 828x552, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70de1cd82d265e9c15d7951d97cf3f7a","sha1":"4a42d257a9026afba24744f80e46f90feb3d4fd6","sha256":"95457f49b25e79fb91c3d9aaefa2ba1bf23d2260970c109f95097855d66bb090","sha512":"ceacc1eb0a4831e2d0ad3a0c3caa0681c1f02eb8cd443d9c246c11d3231c54eef01ece139ac6e3f0fa2a909a3e6db8278c5dd2eca01402a369df83ffd150bd91","ssdeep":"3072:nDv1i6F65c/g+2jbfCscXM6yvAM0k45jQVVXDSgopKr/T:piWBgvCs8uvAM0k5ugopi7","tlshash":"75e312c13cff31b36138c4d61e32c3e85b97979d0f52856e99ab6342c56c89a488e4cb","first_seen":"2026-07-01T01:49:05.915855Z","last_seen":"2026-07-01T01:49:05.915855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":1488,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-01","alert":"Phishing Block","trigger":"hjc297.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"hjc297.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}