{"report_id":"76462d48-2f61-430d-8f1b-31c03e266444","version":0,"status":"done","tags":[],"date":"2026-09-02T20:53:52Z","url":{"schema":"http","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":0,"asn":0,"as":"","country":"Chile","country_code":"CL"},"final":{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"title":"木瓜影院-最新高清电影-热门短剧短视频-好看的电视剧免费在线观看","dom":{"size":11975,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1928)","md5":"147fa5345c79bb37813300d20c154fb9","sha1":"ca23c7827f0a2197cbbcb595ba79d6828b6be2f1","sha256":"8c474231f03cf7ad5c871483fb28406c01dbe10ccf50e47ca2be2ac754b50a80","sha512":"b036511bbad0811fea2bf3b7ba338d32f41f726e1030262cde75c6550731607a5774613abb2be7e009533a8b8f44b2a473f4243340a4fec08ad1ce5786982613","ssdeep":"192:qVz6NMJpu4vAsGNMJpu4vAsk/NMJpu4vAsYNMJpu4vAskzGNMJpu4vAsSY6QNMJ9:+Tu8Tu7eTuWTu7BTu667Tu76BX4sTu7g","tlshash":"6332b9f75b93458243bcc72d60621218cb4e7a5fc856ae72da800ebce39468f3ad05d9","dom_hash":"domhashdd392b486e9df7ec7e1d4332b8115aa1","first_seen":"2026-09-02T20:39:12.66944Z","last_seen":"2026-09-02T20:53:54.716209Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":0,"asn":0,"as":"","country":"Chile","country_code":"CL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T20:53:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cba1188.com","ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T20:39:07.987899Z","last_seen":"2026-09-02T20:39:07.987899Z","alert_count":80,"request_count":16,"received_data":548278,"sent_data":7349,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.ljfgg.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-07","domain_rank":0,"first_seen":"2025-03-13T02:51:18.469686Z","last_seen":"2026-09-02T20:39:08.705495Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":901,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.lfjgg.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-30T23:53:26.975624Z","last_seen":"2026-09-02T20:39:09.720845Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":900,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"eval","is_inline":false,"md5":"6826705495c9e1081d6a2d558054f01b","sha1":"f1818281538119b3b39d8c77bbf8c4b7b0510d22","sha256":"20fec80c9a8d6bc18ce62555f37d98510f908975183559ea2b60d4bffab7a902","sha512":"c4ff1c9a5160cb4c35cf44baada599d33fcff31789f396021831845e73427555fd9795eab96641ab370f006052e8b983a88787ec4ee761ed136774e9f004a286","ssdeep":"","tlshash":"d70199d373258ab9837518e648d90714a6b2f916791680fca1680dc817729a6c1e3bbc","size":674,"data":"","first_seen":"2026-09-02T20:39:12.696452Z","last_seen":"2026-09-02T20:54:33.983295Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-03T00:16:42.847579Z","times_seen":751949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/jquery.min.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a62f575fb52cb848de2033b1b01c90","sha1":"515faaf1dacfa7e29997b06d2a367b052e3436dc","sha256":"624a270cef28d452066ce98002deb98b0a0dae7493692008a173c2d2c92f8afe","sha512":"8f37a9ecf97c52409d86cdb0d155c570996525817dff6e09f13ca2dab54842cdfbc862f88283141e9d48618d053ff0cee799283972005c218df3e1055a242679","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96cuYo/NWLbVj3kCCJv0N:+kn6x2xe9Nh6nCCeN","tlshash":"e0831add72c6b06247ab71ba40bf550bf2361859684d8410f225e4e9bcb4b4e823bf7d","size":88532,"data":"","first_seen":"2026-05-04T02:09:56.384956Z","last_seen":"2026-09-02T20:54:33.932622Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-03T00:09:13.056051Z","times_seen":238885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/jquery.cookie.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e310e61dfc88600402a68d0ce27ed07e","sha1":"4b7ae25651db07667ef30240d160a0426c0cf47f","sha256":"c2521d867a375d594e2e0406f43932931d6a779931cb549ca978384a5a1ab4b6","sha512":"5cda65796d85dd43c6285d1ff5b22d80b2d10c0da5041fee17d82cbaa2ee6e63ac9a2bbe9d18c7862d41bf8b6bedf49c533602594b96653170b6694465b80b3d","ssdeep":"","tlshash":"3b11ab0832881a0c48db07d23e39294ab438eb359556606cab4d77f03274d43d9e36f6","size":1037,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-09-02T20:54:33.934661Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/hlhtml.js?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b749511da0bbbd7dc86621d458db8ea9","sha1":"6f7948da79bb38c8ac5a07bdb1c2a45cfb9950e3","sha256":"94ad9ae8867b2c3fedb18c59768cdab3cd4d1f00ce435a0a74968fdef5951ee6","sha512":"1f299c19911422d12482a6d7b3141dde6e64e2deed297d541eb164ade74ab960cfe330308debf5a29e9b93e1e3d07b0b1f8027d70efe6b31488dc45087fe7966","ssdeep":"384:XaCuNKC5YwXeMFsGHZwwhyExm6PcjxdaHYi1BeBKbJJBY3rQ7C16rWNRTA41HfsW:5uNKaej3G5cldGYi1BeBWJJBY3rQ7C1x","tlshash":"4fa21f93e0e1ac8dc7beca77432a50f5e91f009659c0ac6aca88ec6074dc717f5c56b6","size":23212,"data":"","first_seen":"2025-12-20T06:24:31.18434Z","last_seen":"2026-09-02T20:54:33.940995Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"introduction_type":"Function","is_inline":false,"md5":"8410fbf3eb1d216d5a0aaaf1326813fa","sha1":"7df6c7dd1bf579431424882e9834a1e0bc39fdf0","sha256":"8838b4c0d7077b22060aa571be6ca5bd6e605bd380eaaee551b039d07b2c9312","sha512":"bd78b2d846eb844017effabe418bf6a7e2420943faa61932e3cd96edef49566c70feaaefdf5191c051c71f5143b72e4b77ec9e9e14d10eddfc77d784d41f3d4c","ssdeep":"","tlshash":"4f01fed373258ab8c37514e644da0b0491b2f8167c16c0fc60684dc817725a6c1d3bbc","size":700,"data":"","first_seen":"2026-05-04T02:09:56.400414Z","last_seen":"2026-09-02T20:54:33.985044Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":" 海螺影视模版  www.conch.vip","filename":"https://cba1188.com/template/conch/asset/js/hlhtml.js?v=5.9","line_number":1,"column_number":23049},{"level":"log","text":" 使用模版请联系  QQ：52225119 交流群：638211","filename":"https://cba1188.com/template/conch/asset/js/hlhtml.js?v=5.9","line_number":1,"column_number":23128}]},"http":[{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/parts/jquery.adaptive.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.391Z","timestamp":1788382382391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/parts/jquery.adaptive.js HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-1481\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5249,"size_decoded":2561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1100)","md5":"5825d6f1b8923299dbd3b645e08684a2","sha1":"99e33478a1d4737edc6fad9bba47921940ef80bf","sha256":"01fd782216c2cb7bfedf0e0cb891088245f5bd1a048520ada515bfbfc1551231","sha512":"668167e2557d3a6307680c8a902fe336b6e63e82ff18e88b0e98d4034686eafbfe40cfcef11293c569ece4380d1e6c7f9bbcd3730905b0a05ab8cf12669c2d36","ssdeep":"96:2oKSt4++x13ua+6xZ2aqXQA/PN5D8Kt8bXWlU0mWD6d:2PMM3up6xZ2aqXzPN5D8Y8zWlUP26d","tlshash":"a4b1301cb9e1253339173dfe16bfe488a12ba427514a9b2d7c2ca1c12f4415ca077aed","first_seen":"2023-03-08T00:15:25Z","last_seen":"2026-09-02T20:54:33.924201Z","times_seen":191,"resource_available":true,"data":null}},"time_used":1465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ljfgg.top/fggd/hf.js","fqdn":"www.ljfgg.top","domain":"ljfgg.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.397Z","timestamp":1788382382397,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /fggd/hf.js HTTP/1.1\r\nHost: www.ljfgg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T00:17:36.294071Z","times_seen":18245440,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/hlexpand.js?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.413Z","timestamp":1788382382413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/hlexpand.js?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-19bb\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6587,"size_decoded":2739,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (326)","md5":"83e1c561277009a48f5ce10d2ee13e14","sha1":"459462b45d0777c4b59e76dc52c5a2edc91ba921","sha256":"a97b895bf28247a03decdc3f4f4d83720c273321d76805136ab1dc965a48eb55","sha512":"28865dda5b12bec351c511cf54c3b11d77a803a2af0512d864db72f2bf691a02c3228d8a258bae2d6e7b1125a93cad64109082890aa7cc3f06a4ded9f83136cd","ssdeep":"96:E8m3hsrk74XrjuvTQYXrjAxcB3YrwkHBboYriCiPUzriNiwpSZD1Tjg46Zj1ZR:E8xrkKI/Aid8ptowiCiPUviNiw54Q","tlshash":"b4d1719fe79c547658eb25b58cbf2bd6603d84328d018eeafcfc90443768c2856195e8","first_seen":"2025-12-20T06:24:31.288646Z","last_seen":"2026-09-02T20:54:33.926515Z","times_seen":24,"resource_available":true,"data":null}},"time_used":1972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1972,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lfjgg.top/fggd/lm.js","fqdn":"www.lfjgg.top","domain":"lfjgg.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:04.781Z","timestamp":1788382384781,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fggd/lm.js HTTP/1.1\r\nHost: www.lfjgg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T00:17:36.294071Z","times_seen":18245440,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/css/hlstyle.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.349Z","timestamp":1788382382349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/css/hlstyle.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-1b116\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110870,"size_decoded":22608,"mime_type":"text/css","magic":"ASCII text, with very long lines (467)","md5":"ae4f2c7070105046eac3176c152ec225","sha1":"b2b0c85af082f6185376ff744348bbf8b74ca7af","sha256":"5ad2c8637a72a06ab2fcb0cff6f795a37f489e9e504aec3ca0a405af6f567310","sha512":"c0e12a85ab161e5d2e429f6425200fa42b276ac270fb80d333a3c5c03e2e91f5a57c50248f0ea49597d4cec6611757668a062648a07945804feda82507ce0d35","ssdeep":"1536:6KyvQ4y05O3IsXkzXq5NBuRvUAonH8C/EUkhZ:4hyYOfkzXq5NISDC","tlshash":"15b3862de7102104b06bd9e3f9e79baf5225c065e3060bbdf2f72820c68f59516f26d6","first_seen":"2025-12-20T06:24:31.217627Z","last_seen":"2026-09-02T20:54:33.963915Z","times_seen":24,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/hlhtml.js?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.387Z","timestamp":1788382382387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/hlhtml.js?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-5aac\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23212,"size_decoded":9111,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23212), with no line terminators","md5":"b749511da0bbbd7dc86621d458db8ea9","sha1":"6f7948da79bb38c8ac5a07bdb1c2a45cfb9950e3","sha256":"94ad9ae8867b2c3fedb18c59768cdab3cd4d1f00ce435a0a74968fdef5951ee6","sha512":"1f299c19911422d12482a6d7b3141dde6e64e2deed297d541eb164ade74ab960cfe330308debf5a29e9b93e1e3d07b0b1f8027d70efe6b31488dc45087fe7966","ssdeep":"384:XaCuNKC5YwXeMFsGHZwwhyExm6PcjxdaHYi1BeBKbJJBY3rQ7C16rWNRTA41HfsW:5uNKaej3G5cldGYi1BeBWJJBY3rQ7C1x","tlshash":"4fa21f93e0e1ac8dc7beca77432a50f5e91f009659c0ac6aca88ec6074dc717f5c56b6","first_seen":"2025-12-20T06:24:31.18434Z","last_seen":"2026-09-02T20:54:33.940995Z","times_seen":20,"resource_available":true,"data":null}},"time_used":1420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/dw.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.388Z","timestamp":1788382382388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/dw.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":264,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T00:02:45.969067Z","times_seen":320357,"resource_available":true,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/hlstem.js?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.412Z","timestamp":1788382382412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/hlstem.js?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-1973f\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104255,"size_decoded":37666,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7be0f97d63fb0c67527f23013fdb4123","sha1":"9e8b48c3ea719f62862cb7a4169d1dc632d8c0ab","sha256":"78eebbc0a2538ef00335f92741e8440422aaea51d42665833b4198b93cbc9ed9","sha512":"44a94f0fb15b868d96f4ec20b95385b6f258871e6c71b86a6aadddcce9cef519629c1eaa00269a72797848211b97bb62bd1d6032029bdf490fecc8377553762d","ssdeep":"1536:fVOovWb2hF1ZisTT0Z2RSn/6T5pJmkyqEvVUsbYKFJ7eO:fVVvWb4eZ6SiTjJmkyqERt/","tlshash":"1aa320c0a5f07b420bbf12e77726dcf5fe1a049629b8712db180a8ad245d666f3805f7","first_seen":"2025-12-20T06:24:31.247382Z","last_seen":"2026-09-02T20:54:33.925081Z","times_seen":23,"resource_available":true,"data":null}},"time_used":1687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/home.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.415Z","timestamp":1788382382415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/home.js HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-95ef\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38383,"size_decoded":9886,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"1f4fcafe30987e060c5f65013e12ec7f","sha1":"e058804b1ac78ea2e386890a0d7f1a16463a9e9e","sha256":"352ad02ce9358b6ecd520fd9f7b35b16947d793447fca83d05ac7bfeca508324","sha512":"ff9076a91df4c66aa4c294ce20b36c4701b820b649b2498b753e14dd90b10a217e53a724df5f0e93f03733b57b603e88d47b224d87ef54f1d5e3d76ce1c93b53","ssdeep":"768:hR0cTTu8ehbZLbhpa6yeb7z9SsbhjUeA5gr991o5E7Iw4TQvD:hRZXdeC67USXD","tlshash":"9e03a55dbaf3142050b3317a4fbf6504227a815f590dcd88fe2d11a44fc4a4eba66bbd","first_seen":"2025-06-29T15:29:15.493039Z","last_seen":"2026-09-02T20:54:33.974158Z","times_seen":33,"resource_available":true,"data":null}},"time_used":1971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/jquery.cookie.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.385Z","timestamp":1788382382385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/jquery.cookie.js HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-40d\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":1031,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (984)","md5":"e310e61dfc88600402a68d0ce27ed07e","sha1":"4b7ae25651db07667ef30240d160a0426c0cf47f","sha256":"c2521d867a375d594e2e0406f43932931d6a779931cb549ca978384a5a1ab4b6","sha512":"5cda65796d85dd43c6285d1ff5b22d80b2d10c0da5041fee17d82cbaa2ee6e63ac9a2bbe9d18c7862d41bf8b6bedf49c533602594b96653170b6694465b80b3d","ssdeep":"","tlshash":"3b11ab0832881a0c48db07d23e39294ab438eb359556606cab4d77f03274d43d9e36f6","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-09-02T20:54:33.934661Z","times_seen":211,"resource_available":true,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lfjgg.top/fggd/lm.js","fqdn":"www.lfjgg.top","domain":"lfjgg.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.395Z","timestamp":1788382382395,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fggd/lm.js HTTP/1.1\r\nHost: www.lfjgg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T00:17:36.294071Z","times_seen":18245440,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ljfgg.top/fggd/xtb.js","fqdn":"www.ljfgg.top","domain":"ljfgg.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.399Z","timestamp":1788382382399,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /fggd/xtb.js HTTP/1.1\r\nHost: www.ljfgg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T00:17:36.294071Z","times_seen":18245440,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/jquery.ac.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.416Z","timestamp":1788382382416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/jquery.ac.js HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-6215\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25109,"size_decoded":6142,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-09-02T20:54:33.927361Z","times_seen":21092,"resource_available":true,"data":null}},"time_used":1970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/dw.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:03.820Z","timestamp":1788382383820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/dw.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:03 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":264,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T00:02:45.969067Z","times_seen":320357,"resource_available":true,"data":null}},"time_used":951,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":951,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:52:50.075Z","timestamp":1788382370075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:01 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125345,"size_decoded":21248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41273)","md5":"48d45f5bbb0bd059a5c0619228d3332c","sha1":"3fa35f2c96a666b57002a27a235f988730deaf9d","sha256":"29da225484536936337fdaa483b685297beec57cf5c8155f325ba261a75c922f","sha512":"071f9af4fd1234c2bc48f5ee4c5ad52a5f3e12257999c2cff0dc5bf06ced2e08e8a98aa40bdc7c475f36f4e492c855cafa63fe3522d75ba23b69c4206b608d82","ssdeep":"768:cvAcfr2AxJBX/DFx4nuwhTFlYWVPhvPZD2uyngg2+SDQTc9sgvdYSI/ZwegoR6hR:cvAcfr2AxJBX0cZgzOq51iJn/9P8v4Fu","tlshash":"10c384a291eb6f3342bbd2ca35e85b2bb8c3b2dcda530d1366fc16d567c4e527181406","first_seen":"2026-09-02T20:39:12.691338Z","last_seen":"2026-09-02T20:53:54.742164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12085,"timings":{"blocked":-1,"dns":37,"connect":242,"send":0,"wait":10350,"receive":0,"ssl":1456},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/js/jquery.min.js","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.384Z","timestamp":1788382382384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/js/jquery.min.js HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-159d4\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88532,"size_decoded":31805,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"28a62f575fb52cb848de2033b1b01c90","sha1":"515faaf1dacfa7e29997b06d2a367b052e3436dc","sha256":"624a270cef28d452066ce98002deb98b0a0dae7493692008a173c2d2c92f8afe","sha512":"8f37a9ecf97c52409d86cdb0d155c570996525817dff6e09f13ca2dab54842cdfbc862f88283141e9d48618d053ff0cee799283972005c218df3e1055a242679","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96cuYo/NWLbVj3kCCJv0N:+kn6x2xe9Nh6nCCeN","tlshash":"e0831add72c6b06247ab71ba40bf550bf2361859684d8410f225e4e9bcb4b4e823bf7d","first_seen":"2026-05-04T02:09:56.384956Z","last_seen":"2026-09-02T20:54:33.932622Z","times_seen":9,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/dw.js?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.390Z","timestamp":1788382382390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/dw.js?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":264,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T00:02:45.969067Z","times_seen":320357,"resource_available":true,"data":null}},"time_used":1417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/css/mxstyle.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.347Z","timestamp":1788382382347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/css/mxstyle.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f2b4-2f4c\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12108,"size_decoded":2663,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c70059217a8819581e96412bd212f47b","sha1":"5d37dfce8f7f93eec05bb687d6c413a7f14bf5cd","sha256":"ba6761f1934301b570c95ec0d07dffe149acba3031f31d61df46172972402a53","sha512":"3f4d5e489d19a0b32cd16f7da72739be1c111a18e6c964273d327e34261b1510010e924ee01541bb40d6f1f8c7c46506d27c090e770a049ea4fce4c635ac78c6","ssdeep":"96:eGIZgQnv41upeer7Dkx8un97HTK3W+IApcOnLNcHKZvZMIV3xG:eGIZgQwkTrItnOW+7WOnhSOhMsBG","tlshash":"8942f5ce9b759c274426889bbc549c9b123a66937ebbdd9bf2e51c05c1dec4380c3a43","first_seen":"2025-04-16T18:12:16.472938Z","last_seen":"2026-09-02T20:54:33.931368Z","times_seen":197,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/css/default.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.350Z","timestamp":1788382382350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/css/default.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 37\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\netag: \"6a96f2b4-25\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":540,"mime_type":"text/css","magic":"ASCII text","md5":"2c289228fe0456715181a1b2298fc755","sha1":"2db51211d467e25d495f091c172d997b940e8c56","sha256":"aa4ca9177f16bc59ec7ca4b1f99273de35135cfc704bdd6538af8de32ba62b24","sha512":"b4e26e56b7b444cf4c3226c63414410a2f28f26b6ced36f317dc201866c8a2467383f97c9669e584a9320513523d7b14884d75e287b80abcc45cbdd177c3a78f","ssdeep":"","tlshash":"dc8000a820833020032acb3028aac20808a880c32a00f80ffcca2282bc0a80a0200a03","first_seen":"2023-04-07T20:12:11Z","last_seen":"2026-09-02T20:54:33.967044Z","times_seen":221,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cba1188.com/template/conch/asset/css/white.css?v=5.9","fqdn":"cba1188.com","domain":"cba1188.com","tld":"com"},"ip":{"addr":"166.75.237.67","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cba1188.com/","date":"2026-09-02T20:53:02.382Z","timestamp":1788382382382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cba1188.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 16:28:56 GMT","end":"Mon, 26 Oct 2026 16:28:55 GMT"},"fingerprint":{"sha1":"3B:F0:44:86:77:38:8E:CC:C0:8A:DE:0E:AD:F6:B8:5E:74:CB:3F:1F","sha256":"E9:42:B9:7B:0B:E0:F6:1C:C8:11:16:12:D6:85:59:A4:A0:7F:93:0B:B1:DD:B7:10:2F:94:48:87:59:60:91:CE"}}},"request":{"raw":"GET /template/conch/asset/css/white.css?v=5.9 HTTP/1.1\r\nHost: cba1188.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cba1188.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 20:53:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 37\r\nlast-modified: Tue, 01 Sep 2026 15:43:48 GMT\r\netag: \"6a96f2b4-25\"\r\nexpires: Thu, 03 Sep 2026 08:53:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":540,"mime_type":"text/css","magic":"ASCII text","md5":"2c289228fe0456715181a1b2298fc755","sha1":"2db51211d467e25d495f091c172d997b940e8c56","sha256":"aa4ca9177f16bc59ec7ca4b1f99273de35135cfc704bdd6538af8de32ba62b24","sha512":"b4e26e56b7b444cf4c3226c63414410a2f28f26b6ced36f317dc201866c8a2467383f97c9669e584a9320513523d7b14884d75e287b80abcc45cbdd177c3a78f","ssdeep":"","tlshash":"dc8000a820833020032acb3028aac20808a880c32a00f80ffcca2282bc0a80a0200a03","first_seen":"2023-04-07T20:12:11Z","last_seen":"2026-09-02T20:54:33.967044Z","times_seen":221,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cba1188.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cba1188.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}