{"report_id":"7275f989-7b04-4303-b424-34611ee5da5b","version":0,"status":"done","tags":[],"date":"2026-08-31T18:39:04Z","url":{"schema":"http","addr":"chat.huahangcrew.com/","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":0,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"chat.huahangcrew.com/","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"title":"アクセス環境の確認","dom":{"size":29632,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1ce596096155a9e8f2db21ab5c0bd69f","sha1":"2f4667200c569b0181ae25fc76bc2be5f7450bfc","sha256":"c4ebea0f89908e277e67e9521c241c452ba1d47622b43b04096fedfd01e1776f","sha512":"32e717464b3ce941986ee9734465b343eba51ac40895e117b4e7dc80a9cc846bab9ca0fdc62a3f2d81f2d3ac35ed1af72847c7fbf81da604182d0c64ba27a2e7","ssdeep":"384:fPn+QPn09DnoPF5Chti5NTfGREkuvi+ssVUKpS/vRibpLF:Pn09DnqF55LG3+ss+NA1LF","tlshash":"97d2b7a659f310b27d63a13a1beb50d17130d407f405dd487f8dc2888f9a9e4e8b7b98","dom_hash":"domhashd9e7ad7667c3e5d34721352c43a26722","first_seen":"2026-08-31T14:57:31.728927Z","last_seen":"2026-08-31T19:00:49.908395Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chat.huahangcrew.com/","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":0,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T18:39:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"chat.huahangcrew.com","ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"domain_registered":"2020-09-22","domain_rank":0,"first_seen":"2026-08-31T14:57:27.392801Z","last_seen":"2026-08-31T14:57:27.392801Z","alert_count":12,"request_count":4,"received_data":44512,"sent_data":2013,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chat.huahangcrew.com/","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"800b167160026ddb42153669147480a1","sha1":"a899e338b5ef6efe235a1895f7e2b341174600fd","sha256":"cda78a1a46094fe4fb3a522d4edad6dd9101848a543bc5ec7849f941a7513cd9","sha512":"e05f76baa6d82f46af9962a0aed398ab2d2a8a52525e3565b313e3a4ebd857822cf739c238eb6c3e431dfcbaeb9de1d6f475c6e45d766ff54d5da7474c2cb699","ssdeep":"192:/ioA57TfvuRqXk8ZbziWTxsv0sqluKWUSSBYIa8iRivxF84r0/wpX7tm:/i5NTfGREkuvi+ssVUKpS/vRibpLA","tlshash":"8a62c79558f1007156b7717b1beb60a1b530900bb808de847e4cc2c45feea64d9fbbe9","size":15857,"data":"","first_seen":"2026-08-31T14:57:31.747093Z","last_seen":"2026-08-31T19:00:49.913611Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chat.huahangcrew.com/","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T18:38:34.925Z","timestamp":1788201514925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.huahangcrew.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 16:50:45 GMT","end":"Thu, 26 Nov 2026 16:50:44 GMT"},"fingerprint":{"sha1":"DE:31:E3:1C:90:B6:0F:C0:88:A9:2D:49:F0:59:EA:6F:2F:99:E5:01","sha256":"14:66:FD:49:D1:27:B6:36:4F:FA:CD:F2:31:DB:CE:20:15:14:D1:91:26:82:7F:CD:5E:10:AA:49:C8:A9:C8:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chat.huahangcrew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 28 Aug 2026 18:16:45 GMT\r\netag: \"73c2-65a1f748a16ae-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8377\r\ncontent-type: text/html\r\ndate: Mon, 31 Aug 2026 18:38:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29634,"size_decoded":8660,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"fdabea8338214709de113dde1238446b","sha1":"96d8f4cd41ff20914dfb2fb8f9ced045f7b24ae9","sha256":"2ce36a8efb3ec319d29039a96b3b4f21f897863aa1f1bdfc935f3948f5aa03ad","sha512":"1b79d1b12244591a36c43b7ad589422d16d077b30ddf1b17f448d4dfb63fff688b499f0169451b79b97ca2bcb461847682ba56be7151d4cd142dbf948592731e","ssdeep":"384:dPn+Qjn09DnoPF5Chfi5NTfGREkuvi+ssVUKpS/vRibpLT:Jn09DnqF5xLG3+ss+NA1LT","tlshash":"70d2b7a659f310b27d63a13a1beb60d17130d407f405dd487e8dc2888f9a9e4e8b7b98","first_seen":"2026-08-31T14:57:31.744302Z","last_seen":"2026-08-31T19:00:49.91289Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":-1,"dns":15,"connect":263,"send":0,"wait":522,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.huahangcrew.com/header_01_logo.png","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.huahangcrew.com/","date":"2026-08-31T18:38:36.519Z","timestamp":1788201516519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.huahangcrew.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 16:50:45 GMT","end":"Thu, 26 Nov 2026 16:50:44 GMT"},"fingerprint":{"sha1":"DE:31:E3:1C:90:B6:0F:C0:88:A9:2D:49:F0:59:EA:6F:2F:99:E5:01","sha256":"14:66:FD:49:D1:27:B6:36:4F:FA:CD:F2:31:DB:CE:20:15:14:D1:91:26:82:7F:CD:5E:10:AA:49:C8:A9:C8:CA"}}},"request":{"raw":"GET /header_01_logo.png HTTP/1.1\r\nHost: chat.huahangcrew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.huahangcrew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 28 Aug 2026 18:16:45 GMT\r\netag: \"3540-65a1f748a16ae\"\r\naccept-ranges: bytes\r\ncontent-length: 13632\r\ncontent-type: image/png\r\ndate: Mon, 31 Aug 2026 18:38:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13632,"size_decoded":13864,"mime_type":"image/png","magic":"PNG image data, 449 x 182, 8-bit/color RGBA, non-interlaced","md5":"9acc21d16573453785a346e442f0f735","sha1":"e4a3851629ab05d445adc6ef4e8498b3651bdee6","sha256":"e6b6dc32dbbfdbd322e3b71e62f9dcd6afafaab605ff0d19c52a94fdad32344f","sha512":"52edfc49b66b830f56b425e5de0a014c14b5448720cfc2c6dd59a6cbe6af2b88d21f92752e4a59657cb7604658b333d40f3e8b5f0e65b4bbdd05fd5fc915cb90","ssdeep":"384:o/eRTE9/sA76JnUKQE3LI91Q4lIw3qQ5Octuxhczqla+bk:o/eRTes3UKp3Yq433q6OWu0Wk","tlshash":"3452be4988d430b6e837ecd55aa563ef04970b3c78ac650a396adf0c3580c5ab179fb9","first_seen":"2026-08-31T14:57:31.733019Z","last_seen":"2026-08-31T19:00:49.909788Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.huahangcrew.com/check_blocked.php?_=1788201516509","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chat.huahangcrew.com/","date":"2026-08-31T18:38:36.522Z","timestamp":1788201516522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.huahangcrew.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 16:50:45 GMT","end":"Thu, 26 Nov 2026 16:50:44 GMT"},"fingerprint":{"sha1":"DE:31:E3:1C:90:B6:0F:C0:88:A9:2D:49:F0:59:EA:6F:2F:99:E5:01","sha256":"14:66:FD:49:D1:27:B6:36:4F:FA:CD:F2:31:DB:CE:20:15:14:D1:91:26:82:7F:CD:5E:10:AA:49:C8:A9:C8:CA"}}},"request":{"raw":"GET /check_blocked.php?_=1788201516509 HTTP/1.1\r\nHost: chat.huahangcrew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chat.huahangcrew.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 47\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 31 Aug 2026 18:38:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27,"size_decoded":330,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"38fc97f812aa035ef3d8b4e82b7df92d","sha1":"41cd077186ca9e06993625becc9aaa9d2a8f49f4","sha256":"6d52a43d8c3fe095372296247d6fbfa78d6817eefa6a4f7c7195b0dc31c7f14d","sha512":"6cb27b87d06e287d73ed9e7c99833a20520ca012bbc3051ec73909dac2797cf08eaf48330a73c7131aaa90a0e65ca709f7bd7d751419cb53596c555cfd3a46a9","ssdeep":"","tlshash":"2c80000a02a808a8a22002000a28bb82082a0833a000208ce00ca00c22ab00b802380b","first_seen":"2026-04-07T05:02:46.281509Z","last_seen":"2026-08-31T19:00:49.911301Z","times_seen":8,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.huahangcrew.com/favicon.ico","fqdn":"chat.huahangcrew.com","domain":"huahangcrew.com","tld":"com"},"ip":{"addr":"158.51.108.157","port":443,"asn":18526,"as":"DDPS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.huahangcrew.com/","date":"2026-08-31T18:38:36.737Z","timestamp":1788201516737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.huahangcrew.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 16:50:45 GMT","end":"Thu, 26 Nov 2026 16:50:44 GMT"},"fingerprint":{"sha1":"DE:31:E3:1C:90:B6:0F:C0:88:A9:2D:49:F0:59:EA:6F:2F:99:E5:01","sha256":"14:66:FD:49:D1:27:B6:36:4F:FA:CD:F2:31:DB:CE:20:15:14:D1:91:26:82:7F:CD:5E:10:AA:49:C8:A9:C8:CA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chat.huahangcrew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.huahangcrew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 267\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 31 Aug 2026 18:38:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":267,"size_decoded":421,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"0c3d1a43080e340527a02be2d26966b6","sha1":"dce3deea966f48d1f2ebf3c58e1f3f4d3f93339b","sha256":"356600f4a64989853dabeb575ed7bb2803300b64fbdff4689574fbdf59a03819","sha512":"b8025f86386226e958a67d8fbb40bb8647641add0cf250322800ea7f50a00520a0774cf8f131f8ed1daf0706cff0d5a5a267bfd56263bf97d26fadb51a255f2c","ssdeep":"","tlshash":"23d02b9d9047239b081116503dc111c2238912fae43981ec2d85e497525867dccda6cd","first_seen":"2026-08-31T14:57:31.738543Z","last_seen":"2026-08-31T19:00:49.912199Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"chat.huahangcrew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}