{"report_id":"70328152-eacf-4874-aded-1dd17e1bccc5","version":0,"status":"done","tags":[],"date":"2026-09-19T07:12:39Z","url":{"schema":"http","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"title":"OBS · 开放直播套件 · 高清录播与推流 | OBS Studio 下载","dom":{"size":25556,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (326)","md5":"e5aa76ee9067c3f6a005b16373ec9ace","sha1":"c0b755f52d0307f0868eb30cb86a626f5a9fa2cd","sha256":"ec9be69010e8247acb8b7fbb4779b251216990a33b85ae03039ecbe35ef912e3","sha512":"f511fbb1b3156c9ad9cef3f00906279153e89aa7fda05ccef5825769eb652198583ef04f73b7d474ca4c933c5452323b6b49db83bfecc647a372903822e68c68","ssdeep":"384:t2e6SyIPz3CbotMoH3nYjHD+vpTUXqToYUebEPmnX:t2e6SyIPGbotZH3nYjHD+vpTGqToYrtX","tlshash":"d6b2086f64e715162923e0782bba970e2271d503c00bce687f9c4748efc5e94ace6b5d","dom_hash":"domhashbe4db89b48d16591fb6f36a27fc80ddd","first_seen":"2026-09-19T07:12:47.944149Z","last_seen":"2026-09-19T07:12:47.944149Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:12:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"game-houtai2.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"obs-live.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"game-houtai2.com.cn","ip":{"addr":"172.67.214.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":1914,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"obs-live.hl.cn","ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":32306,"sent_data":1491,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"112.46.240.47","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-09-15T19:52:54.737321Z","alert_count":1,"request_count":1,"received_data":36514,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-09-15T08:23:46.886753Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":511,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"f36e984d5e0a02559de15d4539514584","sha1":"1fb604fbd078118e4f223c2f3541b4e41047549d","sha256":"64930a0b6187ca0ed46bc99841c40ef4b30da1241eaf8fd89ce0d7c4b6c3fbef","sha512":"8d85e9afdb16aee7dfe8b5eb7e4b36301f68b6185167cbec1940f12940caa999bb9d41d80324836f6a93dc119d717cea98cf7657118a658dad486c0bb1c6cde9","ssdeep":"192:OnX7FLmbA7MLU84p6nl10R7sEgjOaKXOaTZypVnfModqh0bZmeGfapLFtR8/pZe9:sSyIPzdCbotMoH3nYjHD+vpTUXqToYU0","tlshash":"e092e86f65eb15563823d1b46b75970a2221d907c00bce693fac0b48dfc9ed4acd2b1e","size":19529,"data":"","first_seen":"2026-09-19T07:12:47.963645Z","last_seen":"2026-09-19T07:12:47.963645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ab4a0232e518bb2cd1a9d8a55a34c64","sha1":"d3b2daa167c2b9ddbe88796903ee2792d4113c88","sha256":"4adab6ea38549d168745e63355e6aa6a8a0eecf4d33a0dcb352b6ec026aa5002","sha512":"411ab4da7c8f64812a4b2314c9db9197c024a91d2cb002de50edba8225cd33e9da7f2595e5770361e45293d01628226316664cd4d871feee8efd6d2dc62d8e21","ssdeep":"96:mEFp2i4PQiZgQDXyvQHAiCio54UfYoeioh4Tr5i4NQpl0fbnKp:pFp0PQmPyvQHjCzyaZQGbnKp","tlshash":"85a183af3897a0269713703d93bf4108717a80031466d994b81cd265bfb0f39a3baedd","size":4708,"data":"","first_seen":"2026-09-19T07:12:47.966009Z","last_seen":"2026-09-19T07:12:47.966009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"112.46.240.47","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-09-19T08:33:11.253744Z","times_seen":99320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:10.448Z","timestamp":1789801930448,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 427\r\nOrigin: https://obs-live.hl.cn\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://obs-live.hl.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game-houtai2.com.cn/api.php?t=1789801931211\u0026h=obs-live.hl.cn","fqdn":"game-houtai2.com.cn","domain":"game-houtai2.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:11.214Z","timestamp":1789801931214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"game-houtai2.com.cn","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:05:08 GMT","end":"Fri, 11 Dec 2026 14:05:07 GMT"},"fingerprint":{"sha1":"11:FE:03:0B:2D:28:D3:7D:53:1F:B4:CC:E2:25:D3:14:40:44:4C:65","sha256":"21:28:AE:A7:4E:01:5F:83:7C:CD:BC:4E:35:64:CE:FC:F7:BA:B8:A6:63:FA:7E:A5:90:33:E2:89:F5:98:B9:48"}}},"request":{"raw":"GET /api.php?t=1789801931211\u0026h=obs-live.hl.cn HTTP/1.1\r\nHost: game-houtai2.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://obs-live.hl.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 07:12:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store, no-cache, must-revalidate, no-store\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5suiCVoQrf8ACKQbN4Zt%2BbY2g2T%2FgY85Y52WHVCJ2rPsPrGY%2B4t3kKpM%2Fk%2Bd%2FmF444BR225UCvga9KMLSuZvYZz40C70nneQktqFx5%2BG2N%2FbQDVnVtf88GvIi%2Bpw6JuNhW9UNGJR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6c7d618a0a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":923,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53bcff9a571a07e739d295caff743e07","sha1":"6a378a3c35e12a1a957e5e566003dabf7f92fa47","sha256":"bfd80b6905737e0077673d8877ba9b98966957b077fe87388b9fc976b1c3799e","sha512":"1dd4e063df681580d1a306428ad8cf66139e787d57ffdc096c00e6b967f79164a915bdecb7ef862ba4f77dcd5f73ec7ea7a4e30c7041450c3417386eaba46bed","ssdeep":"","tlshash":"459002ef73c0c02416549190556e6264d49b050bc470fc8684105405d1716962454092","first_seen":"2026-09-19T07:12:47.948264Z","last_seen":"2026-09-19T07:12:47.948264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"game-houtai2.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs-live.hl.cn/favicon.ico","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:09.316Z","timestamp":1789801929316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obs-live.hl.cn","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:40:49 GMT","end":"Sun, 15 Nov 2026 14:40:48 GMT"},"fingerprint":{"sha1":"7B:6B:1D:9B:EB:03:7E:03:6E:17:DD:C2:B8:79:15:62:63:60:A2:14","sha256":"A7:67:5D:C1:EA:12:39:CB:97:CB:87:7A:44:AA:FB:DB:5E:1A:2E:99:0F:DF:42:88:6B:84:D3:10:C1:EE:92:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: obs-live.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://obs-live.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 12 Aug 2026 05:55:02 GMT\r\netag: \"b58-658d33a6f9980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2927\r\ncontent-type: image/x-icon\r\ndate: Sat, 19 Sep 2026 07:12:09 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2904,"size_decoded":3212,"mime_type":"image/x-icon","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 213x234, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2440105e79948673d4a71424093678c7","sha1":"092a9e19a0cb676c29e85bb1389395c38cd7cafa","sha256":"65574ea2f00605b0eee5fb94cab7f951d001fcf3692c93a31dadc574070c96b3","sha512":"b479a996959f9cbfd912069c904d18ff0de2f0d9d89b5f8bf4bf72839eb701a3998fb6eecb7ff2d88308d6f4fa91009268f9c36316c5ded300f1e38affeb8c20","ssdeep":"","tlshash":"fc513b537018a4ed55e018a887f17425a08f76c5f613bb7bf4b43bf242cf9e0a507968","first_seen":"2026-09-19T07:12:47.952202Z","last_seen":"2026-09-19T07:14:55.867944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"obs-live.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"112.46.240.47","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:07.857Z","timestamp":1789801927857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://obs-live.hl.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 07:12:09 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: openresty\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvia: CHN-SNxianyang-CMCC6-CACHE26[44],CHN-SNxianyang-CMCC6-CACHE26[ovl,42],CHN-HElangfang-GLOBAL6-CACHE122[ovl,17]\r\nx-ccdn-req-id-46b1: 4ea9103a53f25f3c30d7ea9a612439e1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":36115,"size_decoded":36514,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)","md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-09-19T08:33:11.253744Z","times_seen":99320,"resource_available":true,"data":null}},"time_used":2214,"timings":{"blocked":-1,"dns":1187,"connect":254,"send":0,"wait":298,"receive":0,"ssl":475},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs-live.hl.cn/logo.jpg","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:07.865Z","timestamp":1789801927865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obs-live.hl.cn","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:40:49 GMT","end":"Sun, 15 Nov 2026 14:40:48 GMT"},"fingerprint":{"sha1":"7B:6B:1D:9B:EB:03:7E:03:6E:17:DD:C2:B8:79:15:62:63:60:A2:14","sha256":"A7:67:5D:C1:EA:12:39:CB:97:CB:87:7A:44:AA:FB:DB:5E:1A:2E:99:0F:DF:42:88:6B:84:D3:10:C1:EE:92:85"}}},"request":{"raw":"GET /logo.jpg HTTP/1.1\r\nHost: obs-live.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://obs-live.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 12 Aug 2026 05:55:02 GMT\r\netag: \"b58-658d33a6f9980\"\r\naccept-ranges: bytes\r\ncontent-length: 2904\r\ncontent-type: image/jpeg\r\ndate: Sat, 19 Sep 2026 07:12:07 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2904,"size_decoded":3135,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 213x234, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2440105e79948673d4a71424093678c7","sha1":"092a9e19a0cb676c29e85bb1389395c38cd7cafa","sha256":"65574ea2f00605b0eee5fb94cab7f951d001fcf3692c93a31dadc574070c96b3","sha512":"b479a996959f9cbfd912069c904d18ff0de2f0d9d89b5f8bf4bf72839eb701a3998fb6eecb7ff2d88308d6f4fa91009268f9c36316c5ded300f1e38affeb8c20","ssdeep":"","tlshash":"fc513b537018a4ed55e018a887f17425a08f76c5f613bb7bf4b43bf242cf9e0a507968","first_seen":"2026-09-19T07:12:47.952202Z","last_seen":"2026-09-19T07:14:55.867944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"obs-live.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obs-live.hl.cn/","fqdn":"obs-live.hl.cn","domain":"obs-live.hl.cn","tld":"hl.cn"},"ip":{"addr":"186.243.102.80","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:12:05.665Z","timestamp":1789801925665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"obs-live.hl.cn","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:40:49 GMT","end":"Sun, 15 Nov 2026 14:40:48 GMT"},"fingerprint":{"sha1":"7B:6B:1D:9B:EB:03:7E:03:6E:17:DD:C2:B8:79:15:62:63:60:A2:14","sha256":"A7:67:5D:C1:EA:12:39:CB:97:CB:87:7A:44:AA:FB:DB:5E:1A:2E:99:0F:DF:42:88:6B:84:D3:10:C1:EE:92:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: obs-live.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 14 Sep 2026 03:48:28 GMT\r\netag: \"6463-65b694e9a00e4-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7996\r\ncontent-type: text/html\r\ndate: Sat, 19 Sep 2026 07:12:07 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25699,"size_decoded":8279,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (326)","md5":"b7e6c392e4c7e9945a09d029c3757710","sha1":"f467daca36b471b536c1af9ac76b52b42f7acfea","sha256":"9bf1ac0dc5f16d18f61405348448990d62db2238e33abc795c8114bb9f4e9240","sha512":"f148221f1a8eb7c3f274bbd91de191b368d14c0b279ffa7843b392ba122d34cc270a2b36302d5f3b1c4468544e2fa05206da9eeabbd43dad81e269bc4b1e7f93","ssdeep":"384:x2egSyIPzdCbotMoH3nYjHD+vpTUXqToYUebEPmnSu:x2egSyIPMbotZH3nYjHD+vpTGqToYrtR","tlshash":"42b2086f64e711162923e0782bba970a3271d503c00bce687f9c4748efc5e94add6b9d","first_seen":"2026-09-19T07:12:47.959612Z","last_seen":"2026-09-19T07:14:55.869042Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1776,"timings":{"blocked":0,"dns":736,"connect":246,"send":0,"wait":248,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"obs-live.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game-houtai2.com.cn/relays.json?_=1789801930453","fqdn":"game-houtai2.com.cn","domain":"game-houtai2.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.214.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://obs-live.hl.cn/","date":"2026-09-19T07:12:10.455Z","timestamp":1789801930455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"game-houtai2.com.cn","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 14:05:08 GMT","end":"Fri, 11 Dec 2026 14:05:07 GMT"},"fingerprint":{"sha1":"11:FE:03:0B:2D:28:D3:7D:53:1F:B4:CC:E2:25:D3:14:40:44:4C:65","sha256":"21:28:AE:A7:4E:01:5F:83:7C:CD:BC:4E:35:64:CE:FC:F7:BA:B8:A6:63:FA:7E:A5:90:33:E2:89:F5:98:B9:48"}}},"request":{"raw":"GET /relays.json?_=1789801930453 HTTP/1.1\r\nHost: game-houtai2.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://obs-live.hl.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 07:12:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Sep 2026 15:11:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow, noarchive\r\netag: W/\"6aa56b98-8e\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7xEUrE92h5pyObQca6gzQb2r0dc0X73Ov7uvue1rkYlUlNXj6M8WXaooWM96%2FuDUAVFqws1tUuGDi6fR0noES1LxCAhQagebok%2FD0Zz%2BqjC32omIi5OOma%2FBGWV4%2F%2FXCkiU0B%2B8\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6c7d2bdd6a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":975,"mime_type":"application/json","magic":"JSON text data","md5":"1f11bbee2a5064ed4e0180e087c67fb4","sha1":"e91706480dc75150a6b9d75f24ba1fad6eab94e2","sha256":"3f49aa2cb59116044c673e2cdfe44abab9812c9b6c3a083ecfc774ae06c02a02","sha512":"3a1ad2dd7df27fda05f77ae3008b6161cdc26d805a792cb01ce67e6aaf2eff14120e692adeb8c4d091ca7dd2fa0bf748c03668bde59b1cf313fe9cbbcc0f4088","ssdeep":"","tlshash":"07c0222be0b80c8030280ce0c000b20eaa228bcb2ce3bca23888000c0f0803e02280bb","first_seen":"2026-09-19T07:12:47.962002Z","last_seen":"2026-09-19T07:12:47.962002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":0,"dns":200,"connect":4,"send":0,"wait":517,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"game-houtai2.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}