{"report_id":"7f9500cb-f218-49ec-983c-6d4258b20eec","version":6,"status":"done","tags":[],"date":"2026-01-05T19:17:02Z","url":{"schema":"http","addr":"websiteshare.cn","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"websiteshare.cn/#/","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"title":"妙书签 - Fantastic Bookmark","dom":{"size":10418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8655)","md5":"7026593923da541fbd77c7048bff9b46","sha1":"2b437343ed88a4529858e875d2349caa05c5ef8f","sha256":"b987342ce7b50a088d0eb5cff254c0fdc0929fafeb5e66fcf15f5612487a07f4","sha512":"1c3924c6b656602fdd79556573f835cedeceaae028e155fab1611e810bff96017d6f60f9a75a4bae1e7e69db60648266816a57c8c8af28b8f3a93e6d4a62caf9","ssdeep":"192:XAeRP/MByjPSseBsexwnyNI5JguW1USPwk:woQYP9eyexwEI5mzwk","tlshash":"0d22df17e420796d133b45d6f2603fe421e2f35fc66a906a696cc3a00ed3d6b786f264","dom_hash":"domhashd45f871d8dbe57f02f8faf2d793d8149","first_seen":"2026-01-05T19:17:09.356989Z","last_seen":"2026-01-05T19:17:09.356989Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"websiteshare.cn","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T19:17:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"websiteshare.cn","ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2024-08-13","domain_rank":0,"first_seen":"2026-01-05T19:17:03.503516Z","last_seen":"2026-01-05T19:17:03.503516Z","alert_count":60,"request_count":12,"received_data":3446147,"sent_data":5435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"websiteshare.cn/assets/index-SNNkK9J2.js","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"78ca642ebe0ffa581c8dd8eb247c975d","sha1":"c31c0399fcb9a7e9ae1f1d2c22c6d9219076ea71","sha256":"ea418532369910fe1e1ea0ff075f2d95c3219d3ec2ba6a3e5433bef379796bb2","sha512":"9d9ad3abc58b093cb6b912d1b4bd2763c72916475ccf2dfdb482de918f9bd365a1f1e373b3bc2bf620b16bc33fdc66ef2383130e870e734f7ec8244f72b3968d","ssdeep":"24576:H4fHs7I2NMnJczG89zYEayZrt45bw3D2UB3IgNOgnNRaB/VtFl1fJO7Vfu:H4fHs7I2NMnJczG89zYEayZR45bwiUB2","tlshash":"31555c847195b43583fa41d9706b0805b22c1b4ab408ccf0f1fd8d692a7ad99a5bfb7f","size":1385249,"data":"","first_seen":"2026-01-05T19:17:09.373101Z","last_seen":"2026-01-05T19:17:09.373101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-backup-C65YKudV.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-backup-C65YKudV.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 107196\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-1a2bc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x1283, components 3","md5":"54b5ceb5a33612505071c393a5f7d844","sha1":"359e60b8b9c466e99713b67650aa4b3a320c320b","sha256":"1a22cd92439febe86a5b555692411fde826357f882258142dec9cc3415c1bd39","sha512":"b8b0bb10c2d1ae06a38b10868e4c5a3cd96e323aedd9cc7c7f3f95023a94daf5f79f8ed3b1ce24f353680f5fdd56d4d722eb01b535028418651e60c40cd9276f","ssdeep":"3072:pzW1dYo62yFZjbT+Nyr4FYIP4RQz5c+HkFy8Pzr:hW1dYo6/FZP6Nyr4f4RQa+HkFy8Pzr","tlshash":"97a3d407a840cb53946943e87d131e69af579b2ea4e26ade10235e8f3e723759ccf01d","first_seen":"2026-01-05T19:17:09.359325Z","last_seen":"2026-01-05T19:17:09.359325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2646,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-search-BFPVXLvW.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-search-BFPVXLvW.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115910\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-1c4c6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x883, components 3","md5":"67ebecb4d3e3cfa5988ae9ea80d06b7f","sha1":"167874d873e882ad34daeda4797aedb5aae15b9a","sha256":"2a80a71224b8ba93c25609502eed87ad688fb1bc5d375eb61462d72256eb5711","sha512":"28a636a0e28871b6ed3583516bbfefe265a4d9686a5a3b493b5d7e0358616ec78e1ed333c2f082e0030a361be1597f120a36ef4c86cff36d0c6a61705c1d47f4","ssdeep":"3072:0O9swbFKMvdvdvdvdvdvdvdv+hricPfvL9INH9:K49vdvdvdvdvdvdvdv+9dPLyZ9","tlshash":"ccb35a039d50abd6b12d97d0fe470dd92f495b2cea8279ff11460ecb7a452231cae02e","first_seen":"2026-01-05T19:17:09.3611Z","last_seen":"2026-01-05T19:17:09.3611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2818,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-import-CsC8V2pr.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-import-CsC8V2pr.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 117775\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-1cc0f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117775,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x1321, components 3","md5":"1586443d2ab861cb273492878f6c71f7","sha1":"7822bc7f85b1fe56e11916d7d3ead9a77aef3154","sha256":"832040961ddde9c6069068faa5ba51d71f05c5fe0f8b44d0791e1643f4b64758","sha512":"ac12bf5424c3d7115018fb796a4e14fc6e57492094555d6aad36f96e781baacb95804e27a5185ead968fedca4f3c15051a45cebb70e1f7141436659365688577","ssdeep":"1536:6bL+9Xa7nGGGGGGGGGGGGGGGGGZ8BQMOZLUpY+GxMrS8n6Z0PVRwV8FglNuzJioy:+L+OZeZtUFQsVRwV86lNuzJnbMjVv","tlshash":"2db3a50788104f87a42dc7e8bf531eba5f597b0ce4853beb29a20e8777742564c8e56c","first_seen":"2026-01-05T19:17:09.362765Z","last_seen":"2026-01-05T19:17:09.362765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2755,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T19:16:40.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 716\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-2cc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"235949197e2fb415c801434aea553168","sha1":"fc3d018f52279be33afc78456b6f59ccde0a4662","sha256":"15cddffe4bb15f44eebf990f637876646e898208db2a92153c891022688711cc","sha512":"013c151d5b58c61b7dc8209264e9aa69003e00308090d2d65d3a6ecd10db7584ed0e544ecfbe194217bcd5b943237f9b4f34bdabb6c948dfc4954b5643e278d5","ssdeep":"","tlshash":"0d011b4108e0e459623012046ec4f869add7db0ad38b991138e2a0ae1f83bcb8d9b83c","first_seen":"2026-01-05T19:17:09.363722Z","last_seen":"2026-01-05T19:17:09.363722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2811,"timings":{"blocked":1290,"dns":822,"connect":230,"send":0,"wait":231,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/index-SNNkK9J2.js","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:41.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/index-SNNkK9J2.js HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1385249\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-152321\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1385249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44165)","md5":"e3fbe01e54f8b6a78b30dd562ed197b6","sha1":"0011b6e2fc8c158a1812fe85f19ca7328e4b44a7","sha256":"c3d8966e499d7f11089889689afd2f20b6aaabfbb326e2d5eadb7d150e22df06","sha512":"d619af0b0d66dc0315c05228375703e1dc840f68e551f61bb452bb18315779674d684ac6829c1e24cf83dde205703299395c85ec66aa3a1304613b6bc904e51d","ssdeep":"24576:H4fHs7I2NMnJczG89zYEayZrt45bw3D2UB3IgNOgnNRaB7:H4fHs7I2NMnJczG89zYEayZR45bwiUBa","tlshash":"a3255a947499f43293fa54d5506b0901b33d1b09b40984f0f1bece6a3aaad14a2bff7d","first_seen":"2026-01-05T19:17:09.364763Z","last_seen":"2026-01-05T19:17:09.364763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":4073,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/index-DUJZJCv6.css","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:41.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/index-DUJZJCv6.css HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 440266\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-6b7ca\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":440266,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"9c7543c1941b390e02d11213c1d23249","sha1":"121a4263d671ef0f667bb6c9256ff217dca05067","sha256":"db7d9534f7fc4486c350c26d2c309bcf6775c7235cc320180f6a6ea73c2555e9","sha512":"4607391e59d04f59b41b447c99828b41c71aa20eb5ca21212dd57af0899eb838c081cc1cfa14229b2cf97d89efcf3298869b8456df7392a0f9f195ef7ee50009","ssdeep":"6144:VSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rw:MvBfm","tlshash":"8694f854f713253b282bd63d79c0e9995f14df92d8228bb5fa40b40895c79e212e3e2f","first_seen":"2026-01-05T19:17:09.365778Z","last_seen":"2026-01-05T19:17:09.365778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":708,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/favicon-CbfEsAxH.ico","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:44.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/favicon-CbfEsAxH.ico HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:44 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 22484\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-57d4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22484,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"04a7d999747a6eb30fa93409fc5ae35a","sha1":"6f9f26baa3f0e593478a0c91a546d95f972b180f","sha256":"77d28a34144137db6d5d89af54eb4466a660da3698081791f988730bdb5b2b48","sha512":"c37adf0d3219ad197bf8eabda985a71e75454304aced02c5451e0d838d89b54f4d3a5588ef2eee3eba861a542a28edff7345a7a9f2bac994baec1754be12dff8","ssdeep":"384:zRQvASj0CER6XJxEO9rklsbUS77/ITC+KyJKqstuuQjxz84mcNITorf0Q:zReAq0LIjEOWgUcg6yKsuQj18xs3","tlshash":"8aa2e134f1a89b19cfc53a61c9058db683a23c0fb68f5790964a97fc19bcb78d0b0143","first_seen":"2026-01-05T19:17:09.366656Z","last_seen":"2026-01-05T19:17:09.366656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2076,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2075,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/favicon.ico","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 67646\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-1083e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"463bc1eb63a0bc7db0b26fe8682cd0d2","sha1":"5f700d8d3ad12059757ca6ddd95a829cc1d431eb","sha256":"69fd0ed53c78e2758cb4f4a33a151c752ee452c9ba05def6f3725f99977e386d","sha512":"db9d67d947fd772667fe81056300b11d098a0647298ac04e797c677f52f0e33b3217d7632cf8e939d057bf54dc2c034fbb8f0106d92e01dd912a1d12a18f5cc5","ssdeep":"768:JZAmhVBI+Ul70kNDq7iCD2HhYLQERwqltHvdFpyDy6JdHPG5lL:kmrBI+Up0k07iCQhBERwqlVvhMfBGP","tlshash":"a06308c8f582a256caa18e334ccaacf1641fbe655b31b92630917f7e353359b277011b","first_seen":"2026-01-05T19:17:09.367608Z","last_seen":"2026-01-13T12:27:35.428698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-space-LJ2tiX8A.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-space-LJ2tiX8A.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101357\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-18bed\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x960, components 3","md5":"8fc952467f959d4a50e31942bd980d16","sha1":"8a6612d534d0762c6504de2404abc693f267d83a","sha256":"3101177c8b7aa873feff7eac273fdd3eb7ffed31b94966e2ce9ec70c81ce5562","sha512":"2017791ac9ee623ea619443315172b02172ffe7d347fb9ee41c140cdaeaa7d06a5c841605c1347d26982f264281f46ff34a61173b51b07d7497ae8f746f668e0","ssdeep":"3072:SC5kOLFLhhhheUFz/9ZI3hoooooj3CbTUESSSrlxX:SC5FLFLhhhheUFj9ZIM3CbTUNDX","tlshash":"f3a3260389089f835468c3e8bf075f6d6f067b1da9c6b9ef51170e9f7b22664998e00d","first_seen":"2026-01-05T19:17:09.368479Z","last_seen":"2026-01-05T19:17:09.368479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1669,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-layout-ET8n7udS.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-layout-ET8n7udS.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75736\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-127d8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x782, components 3","md5":"8ed3a313747007f414dbbe1195d04d20","sha1":"1037957f43ca4f58ac60bfd6b741fd3bfd0af002","sha256":"454f00513611ae5a6621c2c674c725f13df8d62e871476c494461ff55f4dae4d","sha512":"1611450c601150a91b4c3b2b059266e4796b8df299774628c78d3a383b2741e5698fc1c11a0ebe936ee275b4b6359a9d288910b9d83f1e9a526f26962b92a8e7","ssdeep":"1536:Eusthf2w0FomAbOtUUUE9e3kxxnEL7+daNbF:0zfx1KUUUMhxEL7SaNh","tlshash":"72732a07cd019f93f428c7f8bf474da96f4a675ce4823afe41261eda7b142215d8a12e","first_seen":"2026-01-05T19:17:09.369452Z","last_seen":"2026-01-05T19:17:09.369452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1835,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/assets/feature-move-BsaGKIkW.jpg","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /assets/feature-move-BsaGKIkW.jpg HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96406\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-17896\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96406,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1400x1053, components 3","md5":"4957479a702d94bd9230d575dd32572d","sha1":"de42451c93f0b28d128ce1a6950d4cbb84f0904e","sha256":"40ea988b91acbadd7875be3ef500b8b8248e0e2e6dfc9a794519968e8942b8dd","sha512":"2e0fea510b3ef93fef763026991f37b4d745c862015cbbc45aeeafe1e07d19c9edff9a156b76de691c5ae299494cdf473a7d880f993de76ea6e0b5c7ef5f00ba","ssdeep":"1536:wF5tStSUtStSttih7Yy6G81XlBv/tHZaUC4aW25xqrBEEiwcYTKZ0esNAJX:oMih7m1JrvBlfiwcYTs0esO","tlshash":"149393074c0cce839169c3e4bf574eae7b5a2b0ce8467aff50945eda7f206525d8902e","first_seen":"2026-01-05T19:17:09.370694Z","last_seen":"2026-01-05T19:17:09.370694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2295,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"websiteshare.cn/contact.png","fqdn":"websiteshare.cn","domain":"websiteshare.cn","tld":"cn"},"ip":{"addr":"106.15.190.14","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://websiteshare.cn/","date":"2026-01-05T19:16:46.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"websiteshare.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 02:47:49 GMT","end":"Sat, 04 Apr 2026 02:47:48 GMT"},"fingerprint":{"sha1":"7A:CB:87:98:18:19:41:DB:7C:35:79:FD:67:D3:4B:6D:83:C0:A9:43","sha256":"18:2A:EC:4F:52:98:F5:CF:E8:D9:03:74:4E:36:9A:74:D9:8D:53:CD:4C:66:75:56:CC:9D:8E:A4:A2:F8:1D:0F"}}},"request":{"raw":"GET /contact.png HTTP/1.1\r\nHost: websiteshare.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://websiteshare.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 05 Jan 2026 19:16:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 912546\r\nlast-modified: Fri, 19 Dec 2025 06:02:19 GMT\r\netag: \"6944ea6b-deca2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":912546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1051 x 1051, 8-bit/color RGB, non-interlaced","md5":"93cefc8647280be52ad2e1083b1c7834","sha1":"b8377e72f353175b8085ab15ba93b1ec1d654abf","sha256":"a262143dadfec851a9d14a8d6bcb6f65842b120495359d1eda7668ea178477b8","sha512":"78c5a9b7c0fcade1ea9fe16aab47c85ca652b691b7912ec872c9c86c6addabf4d66dc7980731424a68094e746b73b0abb935cf6478ac7f3bf2dcd58fd29b5e9e","ssdeep":"24576:L7/RYNaEDhlt4k6qDdgn+g0/XvOR0ubgf25ue:L7pUakxH0RTb9L","tlshash":"3915234b8172c4b5dac66f13a2350d4c7776138ba40966a4232ae67f37363625ff0e87","first_seen":"2026-01-05T19:17:09.371649Z","last_seen":"2026-01-05T19:17:09.371649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"websiteshare.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"websiteshare.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}