{"report_id":"826b4741-c6bf-4fbd-a427-e166de5dc872","version":6,"status":"done","tags":[],"date":"2026-04-13T03:41:45Z","url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"title":"a8国际(股份)有限公司官网","dom":{"size":142,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b9fb8033a73eca77c799230d46758d32","sha1":"0286d558fe23b0995a1dbccc1239dad7e0156578","sha256":"77a31196529ef7f8d35f2e0da86a84965c86faddc1cf0abc7fe8b864351262a8","sha512":"1560f1d8c47d985dd839c0d140505cb9c83da152fa9c5c6d8de82e725fd9258a44d02b7bf07c159c4ac41ee84fb924871e3588606d98cb9fe7ea8cda486f0897","ssdeep":"","tlshash":"22c08c0a746f240cab0311c20a873a40d545c332884a08504b02029770c3027c0c3328","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2025-10-26T16:01:13.179191Z","last_seen":"2026-08-08T06:53:21.287726Z","times_seen":3769,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T03:41:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bbkchn.com","ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"domain_registered":"2020-03-13","domain_rank":0,"first_seen":"2026-04-13T03:41:50.588191Z","last_seen":"2026-04-13T03:41:50.588191Z","alert_count":356,"request_count":89,"received_data":17425089,"sent_data":43574,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2026-04-08T20:05:40.658665Z","alert_count":0,"request_count":1,"received_data":765,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"35.220.147.2","ip":{"addr":"35.220.147.2","port":39003,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":296,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node52.aizhantj.com","ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2024-11-16T06:09:32.002355Z","last_seen":"2026-04-13T02:17:56.935327Z","alert_count":0,"request_count":2,"received_data":36472,"sent_data":1126,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.share.baidu.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-10-11","domain_rank":1421601,"first_seen":"2013-04-25T14:45:11Z","last_seen":"2026-04-08T23:25:58.99785Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-04-06T05:04:06.615629Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2026-04-08T19:21:48.396407Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hm.baidu.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-06T04:32:17.512298Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d424255a5a93cf6f3244645823aea992","sha1":"8581f117c426cd862948be95eb40ac1d480a7f84","sha256":"f6cef5fd2fc86f85db2f7ecf350cbf989a66660457221620094fac0a9d363e2a","sha512":"83b6a166b2e9dc843edc105cd74b992db8c6cda16dbee175dc39d392c300692203dd455cab245d3e3a96abfd91010f12b5a404995285d4ff287a5561fa52acc4","ssdeep":"","tlshash":"ee9002d9f1d9a575f26d6431d51b9205a0164c458c3c415c6100307f385964a841b559","size":57,"data":"","first_seen":"2023-08-25T01:55:59Z","last_seen":"2026-08-07T22:14:31.838792Z","times_seen":2718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6df8ff95db66d97c29632f9d81270b5","sha1":"46829b51a75a034a32c4c1413df10da7444f6419","sha256":"3b562a7c0ab4aa8d5b55c7e4a3832c1fe71acf04927d943144b0b0d3fbf17633","sha512":"b5e4fb50c1f66f5bb53d9f5d244a3f660b5ec5d17303d6b97232ff18b9bcdc1d721c1e3dbdf7c31b998afd3ebc5153ebea0ea5b10b895d6d9a7c23577f42fc60","ssdeep":"","tlshash":"fbd0a78a3b4014b5e78a04b90deeca8eb16660295d9ec011888dc5d94814ee6689960c","size":235,"data":"","first_seen":"2025-03-09T01:56:05.554316Z","last_seen":"2026-08-07T22:14:31.839656Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/common.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b93f2350334d7f4727b71b1f0acac2a6","sha1":"57efc586b3009b74ba01d1656e4d6952cf63a659","sha256":"7209061e11c1579895afd2a1fadd88ac97b6341317decf79aaec7966e187372f","sha512":"cc075cfb1f9fca0b585b27d4b9a903bc6a229d2b4f4cdd0aa96b44738402c536fb76f8191ae79f5aa88434a3bbec7df4812aeb8a5cb384d41f148156155c5a7e","ssdeep":"","tlshash":"b841a71e4d8662789213213552faca0cb6bbc00b5706ca0474adf4568f58fe54c2bfe8","size":2392,"data":"","first_seen":"2026-04-13T00:19:14.245774Z","last_seen":"2026-04-19T19:01:02.843965Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/layer/layer.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.517244Z","times_seen":6110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/swiper.min.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c379840216a38360bb9b9ad8e04bb5c","sha1":"8f8e72c0d949e844dbcd2040b5aecb03a946b084","sha256":"f2ce7eb089bba678231b3521fa0b5fd07bb67eb043256ec45306246df9acc64a","sha512":"37673c191a453ec903cfae87428b577f608fb2545c8a573ceb303e640453ab1c7de30d13913d9874a076cfccf8c807c0a9d90b863947e8a347436160f2b9d29d","ssdeep":"3072:QFJcpzBLpMI1rlZuGHgZsUOUFBWqcQhXG:AAzBLaI1rlZuGHAsUOUFBWqcQhW","tlshash":"94c3184eb39061a550e36256525e8241a3b72409780ad0ac35b6cce7adbde4c13bfffc","size":118210,"data":"","first_seen":"2023-03-07T01:15:09Z","last_seen":"2026-08-03T22:28:28.199037Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"30bacd5bad9574d83dc94e2799efb721","sha1":"65d73b3bdfecf44398cc6613d4ccd8d9206c2980","sha256":"71fa77bcb9eecfb1e36aab7df36dfcf574775c2f8401ef2698cae89593d38373","sha512":"14d5e370d0d8116ca003eb96cb25464d80a81d89294d75b4fac5ce2709bc6de0e697d15dcd81801f0d9d115434c18de0a2a5d5c28c69489ced5cb9fe9777b3b7","ssdeep":"","tlshash":"79c09264be3a6fa8907203276c38f99040facc22d14966c4646b360463047cb4b29224","size":131,"data":"","first_seen":"2025-02-06T06:30:26.390595Z","last_seen":"2026-08-07T22:14:31.840526Z","times_seen":777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/distpicker.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfcea3d36476e39fb29992a838095d3a","sha1":"3b309065cf7b9d438f141177959d11bcd5acca62","sha256":"8dfa54817ad296f180e08c13688dd7b9ff1a62f7cefee9143f89b2cdb4dd90d0","sha512":"a00cbfec5778e8d38a6ad42057a18455ff8fe481d9dfec8c4615bb49cae4ab4b7a7e6361c2630c66987a52bf79c85c85ed1887889039121d12262c324aab262a","ssdeep":"48:6SxJMe3fldTL6eNKBMCyxJWu3hzYArgFX/zdhkYhtLPPzm8+oRN/LbMArgFMhqSq:6SkkdTueN5xJWu3xY3t/Zh/poHExYYcp","tlshash":"6691511ab290652702eb94e2205f550aa43fb09d4009566cf9fed7f65fbc80af27723d","size":4219,"data":"","first_seen":"2025-04-19T17:22:25.364165Z","last_seen":"2026-08-03T22:28:28.192472Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9da3abc0a531b835b0a4c2f92041f5e6","sha1":"a5638d883a44881e9429e875dc0b9bddb62e9d5a","sha256":"3d9975b92f75b79481f608777397376d3a36d09de29a5cd9d2a81ec233245ff5","sha512":"9262021e2b541010106ca5641475b019e7e563e3d7b5a18250fc51c965a7cde263b9b0def846736dd85150a51fc6298255abfdda5ec9519273ef48f0ba9d2fe0","ssdeep":"","tlshash":"0de0c21f5c671974679b043a22bbc548b5e1516f5069d004b49ce8044f55ec6082e7c8","size":320,"data":"","first_seen":"2025-07-21T02:08:02.595908Z","last_seen":"2026-06-04T08:45:44.338302Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"813ab26bc9341a44b6ae3730df60b580","sha1":"9523c2f5e9c019c69dfed8638912e16dbefbbe8e","sha256":"4eed31e79cd2619a3cfd1fad7bf8bd037d04c4872ffade0e6fcbe115423d16e8","sha512":"de432086bde20a58797605b80e1ba1eaa76842aca9126579f7b2ee7f53260f19217a94970d8fce37c95ae69e1a61839678d82c07b6f53b58590b2932544014ea","ssdeep":"","tlshash":"fdb01204325061905057702de18b91c01c04d143c1143090b86ca8880f001f46623a0f","size":99,"data":"","first_seen":"2025-07-21T02:08:02.597294Z","last_seen":"2026-06-04T08:45:44.338815Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/md5.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c37a6ec65ad89108b0db1cd1969635d6","sha1":"d5f969b445ff99ceb2e1889565ac8f0ff6562b0c","sha256":"6952465d6319a8fb9b52d8266a77077ba66396600e342e8d4bebdcd689c43d5b","sha512":"4e4ceb444a6a74f85ac6ec3d7116b64867cd9c66de176088748239ad0d51de26808586d1333fbc2fa91608e0183d02242ccd9030283ce01b2c0aa378f701d048","ssdeep":"192:cmGLmnFUJQEh47wVNc6n4LaXa8LZS7UEJkRAvk/4jLGkP:cmGLmFUJ7h47wrcASwEJkWvkmP","tlshash":"c3122f48f78d00968e53e230657e7c96f0ecf138097892abfbdc44e276895e49768f91","size":9456,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-04T22:29:49.303807Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d3092393f33d27f094137597d79480","sha1":"9645e7ac69a5b8b7b8351f3813a9b685f7d840fc","sha256":"5155fd50a578ead2284f4e3c08c43d8872fd8035d82aac52ea95b436381a18dd","sha512":"ed894b067483bdee890f64357c1e17f4b788aa6ab6a2e62d81512a74362fbde3eea38fc21045fc0b2b08d1762f2e5bfe5a18981e83538d199f2c73a37bb9af72","ssdeep":"","tlshash":"0df09e6ed841a2581fc729bc57dfd648d46e4468d009d863b4d6c4cd3d38fc8442134c","size":508,"data":"","first_seen":"2026-02-14T09:51:52.24068Z","last_seen":"2026-05-16T14:02:40.562726Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a029dbd5775fcc8ce300c33a1f964f47","sha1":"04daedabf1e889ffa67c9d785cd334f74d48468e","sha256":"9742ba818c04ae092b983628333439966954ca39b8aaeeb0b1654497d4bcb1e4","sha512":"e5fe663e277a85ee70a71188ba9b4dd4af10e2532a11b5787ea3fcfe5375aa943c4438d4a8fbd2e8f446dc679af1cdb943af162b20dc920788efb2c15873b978","ssdeep":"","tlshash":"3901558b28ff687d2923084a0e2e7460b3a3100b00e6c0043c1c90c08fcda889b7e3b7","size":657,"data":"","first_seen":"2025-07-21T02:08:02.599886Z","last_seen":"2026-06-04T08:45:44.339841Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbd570ba0c8f39405e59fc9ec5423744","sha1":"705b5ff9551a47cc4f81f503b544ba01aac7812c","sha256":"92b3740f1a52f2f9a5ab8aa0e23583a1e28fc2f11aa28ab349f2c0ece1c6ae30","sha512":"9b7bb43c385adbc1cb15465ada47539b1de42411eab7d45c063c75c2d28d5ac6430c07545abcbe4f2bb8134ef1df07faa6f2f271dbeee52b097e79f307602c46","ssdeep":"","tlshash":"24f0924aa5e174ba15276d5a0a6e210aaa3190878c2eb9a4b60d0e54cf6d22c34ba680","size":622,"data":"","first_seen":"2025-07-21T02:08:02.601487Z","last_seen":"2026-06-04T08:45:44.34081Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d7099093e233845b299aa1486f97b0d","sha1":"f8e4b1a2ca3131e91bcd1144270d962167106468","sha256":"92d9562dc467b446b9acc0641279d1ee56e01d880a7c17bcc9754235db8e4b2e","sha512":"0e25e6bb90ea4bd6941996fe8e7c0a8321374636560ac2037e8747309bf7ac80601eaba74eeae6b8f842c2d4020b30acd03c4647db4834f29bb3e8c1b931ea96","ssdeep":"","tlshash":"88f07d05a1b530b31423bd3646be20056e3140834c2f7cb4760c0e50cf2d22c25365d0","size":549,"data":"","first_seen":"2025-07-28T02:25:35.597128Z","last_seen":"2026-06-04T08:45:44.341411Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/distpicker.data.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5c08845527aa740b6764fd4167c022","sha1":"69360c10cc93494dc4d345ac4bbc1952bdf73f19","sha256":"ff7e182a4cddf5327a81c0f6543f5386223b7326359abcb1d294defb04999143","sha512":"43088062304bd5e7805f54569ae2e8d3c47242ef0db91f6974e21afc301de9a5d99f9f08320bd24fc3d964e31789d86076dc1b0cb7ed8bc3759ffe5bc4fe8a7c","ssdeep":"1536:IRunfojphRPlnEnZfl+YAHBjDFWedpj7ZAvUmixdfQ7/T96BQQMOc0cyzlxrAL:IRunoph3n+2BjxRbmvUmkdfQjT9YQQMl","tlshash":"3b6344505cfe3a6535b681b2eb17857cb0b90374d1e28c2e59b53f808ec9669e3f4932","size":68511,"data":"","first_seen":"2025-07-21T02:08:02.548446Z","last_seen":"2026-08-03T22:28:28.203159Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f22dad9f25005682bbf89ff5b5516597","sha1":"40f1fc441166c535664656f8f604ae0e9ff8deca","sha256":"493bb666d56cd2a2b84a06834d3f7cacee7e75c9b3682629daf3cbb66aae890a","sha512":"66c24586787c2cf54d7ca733d6b36c1cad93bce941475c15cf4ecb30c11532d633813d1679004135f8eeeed078bb556e22aca8ca2ec7f2343f7ea001cf470786","ssdeep":"","tlshash":"e2117d9b7070b57600175d7b567f25002e2bc887883a3180f94d0e64cffc3ad652ea97","size":996,"data":"","first_seen":"2025-07-28T02:25:35.598257Z","last_seen":"2026-06-04T08:45:44.343995Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"eval","is_inline":false,"md5":"b9016b438d88c9d06580c73e17d8f2ba","sha1":"1af846395c82d4d0b783cf67f6f4010d6f28dd25","sha256":"27840317931eeb33d7aa6480a66a615e49b403b581e090b48cbdefc829b3d9c2","sha512":"ef32d8496c825685fc87b32a4225a7dbb07f9604b8e410ef5f625a44f408c7c9b4d8f7c22e733d422a4d8932f67d9b6c801ab4054337716e1c73b771a9531fc9","ssdeep":"","tlshash":"8df08b3143d76d2dd0679115e0a0c29c2737c20cabb24b185a7b3c73a18c4d928326ec","size":548,"data":"","first_seen":"2026-04-13T00:19:14.353774Z","last_seen":"2026-04-19T19:01:02.986073Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f8196019cd47d37157a28104f0ea4cb","sha1":"08883721956d02bb0eb861adf7d51c1bd3fb43f3","sha256":"543fa1105349e80645d9e05172b0273ba66c43580eb813f335576199dc429c22","sha512":"7c2e403fa09e2ebbcfa3b2b7ba61e71cb24526fd857f031ee82301ffa2a3f8e3d72cebfd450ee6bcd76b85a3696dcc5488cd0c54180d302c25128e25a22ccca6","ssdeep":"","tlshash":"19e0c204b25612a4009362bba63b68d05d59990b5a1d2100f41d4df1cff917dae1eb0f","size":406,"data":"","first_seen":"2026-04-13T00:19:14.330877Z","last_seen":"2026-04-13T03:42:00.966117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9d49418c905eedc41e7f34f757e3a96","sha1":"d592a344f99989ec5bf02303ed966153cdad39fc","sha256":"e158691f523912392eef8e5f4a9260b07295471c346fe8b998d91fa999be5829","sha512":"2d79887f75af3bcdc2722461d0155061acaad6ff51cc68d4992bff324e4d31c83ca9ed16c0cf6608cbf6fe50e9c07894e37ff0f4c9b7513dc4a9f54429442b54","ssdeep":"","tlshash":"d8214c86a151767601175d7a07fb66513a29884b8a16a980fe0c0ed0cffc23db61f7a7","size":1214,"data":"","first_seen":"2025-07-28T02:25:35.600456Z","last_seen":"2026-06-04T08:45:44.34529Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/push.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad532b192efe82c126bcae5d448ad494","sha1":"1d6ef90026626b798c09f559d982b30fc3821bcb","sha256":"4d50d0fa188e4c86813ca1cf404c1d69d47d46eb219fcb13a1ea344b90eee8d0","sha512":"8575586ca242a184da4d52be01dda61555cd6bfe974e12900df35f6ae36329e57d78ce59ee3c7553f1509c9b072318d7bddb204b4c699fe7213496b1c6b4d4ac","ssdeep":"","tlshash":"97211dce946202bc16a310681abf38dcf2a9063bdc54e541f86ad0410fb4a3703a7ed0","size":1418,"data":"","first_seen":"2025-02-06T06:30:26.389581Z","last_seen":"2026-08-07T22:14:31.827768Z","times_seen":720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-08T06:06:57.415464Z","times_seen":98927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/jquery-1.11.0.min.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1cd7fc161a5cb1d7102d1e72ee1e67f","sha1":"295153b52a34427bcaecb4a55c0aabcca825d544","sha256":"af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee","sha512":"6ecca8caf3f553b90ebf06b902b421b83fbcf2c863e3ca075c1356d3622aa72a56e2dbf3feb239547a5f0ba729361db0d3326ac33e970674dd22a1d883867898","ssdeep":"1536:1PpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jFkODZ2D5N9Rag0MOIdSZAgttoX5Y/:UIO4e2D5c4LgtDmLja98HrA","tlshash":"1493e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96383,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-08T03:36:25.634859Z","times_seen":2332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/jquery.aniview.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"884e9f63a4f285a1a8d9be7629158b4a","sha1":"085a9b73b6808ab5cb6b2b8c6bf0f9ed9801ccb6","sha256":"2ea6063567cb3e4692bd96d029eae03998065febaecccfd9cb9b46c4dc9e1128","sha512":"39c81911e2e858001871c3941143ceedef4c3a26ad0f7755cedafa64ffacca6895f01dfe6d35caaf1e7d552f6b979844810d04e3667587633c13976d154cdfad","ssdeep":"","tlshash":"8a71014a75a21138a0af397f039f518c2bab91271209db203c4e5b589ff0f74b7956ed","size":3684,"data":"","first_seen":"2025-04-19T17:22:25.314619Z","last_seen":"2026-08-03T22:28:28.191653Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae31d6acf3a49b071250469803b65739","sha1":"73ebe2e3a8e30fc5031a159cb6fb14e317b326ef","sha256":"13952a09d9c900703540e36534f01201db5f1495f33a67a5dfd2bfc87271bc37","sha512":"26b45216d15a7a58802a9937d89166f1e091060964d55c97948cd2ec56e3f2218aa0f8af6d819b2f0e5b2882b1cd2c83123d6229e2ce37dd356ad5d14590ea94","ssdeep":"","tlshash":"c5e0a32a100059076a750f34e1f7c009b1a57c972585995396b7c55c1f11ad3184a69c","size":420,"data":"","first_seen":"2025-07-28T02:25:35.601588Z","last_seen":"2026-06-03T23:27:16.193792Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fc2367a071998b9db5d1d0002432a49","sha1":"f9daf0921d3fd7b6f9ab27cf0b145f678a936ec3","sha256":"40ab1ba81f307689ed4156bd3e69849b6fa3e764dcab5ad3e5ebe4f54de2970f","sha512":"a4f6b9dd3fea541cb00f5a220c8ffc0364b6ec4525d93330362069f47de4e293743dd120f1e833cc08ec2aea24df7af3db29328cce40f5516f9d5fb8d4f014b9","ssdeep":"","tlshash":"b751ef0abaab9093793750a98fbf944171a4e0535e09dd21fa9cf3908f8412af2367d4","size":2627,"data":"","first_seen":"2025-07-28T02:25:35.602565Z","last_seen":"2026-06-03T23:27:16.195241Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-08-08T06:06:10.664094Z","times_seen":23530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d2d3d69f7340f9be2ba71c7dbf98e64","sha1":"968c42b57480370b844756499a2a502ae8af5462","sha256":"f99b593f359b244158837d7e79fa115fe53458c77e6e1671514fa4d06695dfda","sha512":"1daa2790b49f923830f71b96c3afc18fce91a0d7faab80621229e485b6371fbacd00c28392929d25accd941a2e365b4a59426def30d3d7a8843e27dff2363ce3","ssdeep":"","tlshash":"1231bd2ae5a0077304ef60e21cae618764321107ab0cdc41be7cf9800f74871eaea6df","size":1716,"data":"","first_seen":"2026-04-13T00:19:14.350615Z","last_seen":"2026-05-14T08:18:34.580204Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node52.aizhantj.com:21233/tjjs/?k=zjjhmvlczo3","fqdn":"node52.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"df3562d0678155927091eb466be74c41","sha1":"bc998c31cc04b2d0a83a7e4488fc7ae78960116e","sha256":"b60c172cf8baa6714ff47c3e3fc1c70afd81ac9ca2f86542f3d9e860a23fdd6d","sha512":"9894e0c0806e1e26c119f10b03d9e4bad88c3889c8ee22a956566f97cecbcd279897806c324b43e903f6ee459cae8fcc4f99aa055b50f11103cb6fe9f8b6d751","ssdeep":"768:LsC5kuNkdE4rDE93/8vupsHs27ZyXnD0T:ACOykdE4rDE93/6uYZknDm","tlshash":"84f2d7d632ca2536a27670a9d95fe50cf4b9aa1437d9ec44590cc0c46d208be83ff9bd","size":35401,"data":"","first_seen":"2026-03-27T20:33:39.469444Z","last_seen":"2026-04-22T08:57:55.917729Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/main.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"840afe3af2dfe803075bb29a9a70a557","sha1":"c501b22db15a9b54696580e873b2e7b671f63e72","sha256":"9ad77c0782470f528b036e2113e34fc8e2bd26c853298626c19085b607eeb729","sha512":"9c53f60e81512cf6f915f80c6d3be2cdba1cf74c25fa739bb1ef208dbfe64469230fbef4f22115eceedd3267401d3b7200c377b3703e0fcbf47ef9821cce5adc","ssdeep":"","tlshash":"0b51df0df1aaa66010b7707b4f7f60842e261907b60dc040fd7cb5e02f9026d6a63eae","size":2492,"data":"","first_seen":"2025-04-19T17:22:25.315361Z","last_seen":"2026-08-03T22:28:28.201423Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"6fa7d0532c6c7ab3df541e2ee9c8b1b9","sha1":"3ddd9c4f211cd8ba7030e973ecdcbcf7537f6a5a","sha256":"206f9a12101749996ff0dda5ae773972a5491baaaa0c8713598f94d51b1de57f","sha512":"f2e030e2dff1ddfa25d189177c79a4dd5d04c345cc3ac8709d56d8d80d904ed696fa825f9612a2cf34f56d37559bcd4f43d0b9f11978f850250ea3daea85f421","ssdeep":"","tlshash":"31f02b3143d76d2dd0679155a5a0869c2737c60c9ba54b185a7b3973a14d4d528322ec","size":529,"data":"","first_seen":"2026-04-13T00:19:14.356393Z","last_seen":"2026-04-19T19:01:03.010959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ed360365b10a0297df6f582a3265d975","sha1":"52d243ef213661fa074b2cbe43791629930346e9","sha256":"894c4445b3717b12c1d602dcc26b93907913da411452681deb9bba82a7d8a4e0","sha512":"c73acd937d19e10ef4ad4c8bde527f15d25967b1a5e353a68edf435ac05cd3fc9c619b35f275ef255c70917a1f7100e83e951aa69f904126d6b71cfa156205a4","ssdeep":"","tlshash":"fe80000fae88c8ac00002c8a0032f20c00208f08f020c82802faa0000ba0bcc0c02c00","size":34,"data":"","first_seen":"2025-02-06T06:30:26.40088Z","last_seen":"2026-06-07T01:45:53.530202Z","times_seen":678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57b01959c25ff49765d3f32e88cc8901","sha1":"863b63e633e9d15b545774ed16ff2fa1ef7f8516","sha256":"0e952126c734fb7a034d44c69fb02e25c7957632db5634337107caa7d466a868","sha512":"4ca4aae14369b46530c363da356a1fd4972c5794ca12456a21ec531a1d06c9d11cfb63e64655c5a0991c8912d42250e6439cdecdd432b2df479b0a32c5673f48","ssdeep":"","tlshash":"08f097ae5c41e6981fd729ac97efd64cc86e4468500ad8a3b4dac4ce3d38fd8482534c","size":508,"data":"","first_seen":"2025-02-06T06:30:26.401802Z","last_seen":"2026-06-07T01:45:53.528224Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5f76cda20f6eaef6e0e4501431bc9718","sha1":"8d6e99424c07e5fd61d985f628f8d1983d099928","sha256":"becc298d21008152e5a47fcf0d6df7ba1777adb842b8220b10a114109154bbe2","sha512":"b594fef0b005c5f9e2abc583237c5700c7f4d3e95a525d290363ec58158a51e4355f9935a72adb3141da564a27ab7cc8a6d8fd23009b1c2ee9845ad9bccb061f","ssdeep":"","tlshash":"01b092929451a42e533287231166201883a9baa0fb461480e8589acd4ce9b44d9b792d","size":116,"data":"","first_seen":"2023-03-07T13:03:49Z","last_seen":"2026-06-07T05:33:46.93078Z","times_seen":14275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A5.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A5.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c0d3471ba138e6340806801c7f6ff9d4","sha1":"5b0b8c54bd3540fba893cbb94504024259a6fb34","sha256":"9b357c4fa921deb8123b2dbb13cfe82cc39e1495ba1fb72d0b66e9e42ff38559","sha512":"faa1acb01a2445110fc2e0ba3a048c67c6e106b8389a138d90bf7ff32cf6a496c6cab2be0da9e8a0e7bc00e4c0b73c79dcb3cad2ae349444c67f00a073d2e66b","ssdeep":"","tlshash":"fa31c91af910e481516fda4324e60517ce13458099c5d066bd8ec43939b45fd496d8d7","first_seen":"2025-04-19T17:22:25.345642Z","last_seen":"2026-08-03T22:28:28.197777Z","times_seen":65,"resource_available":false,"data":null}},"time_used":2100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761977410156539.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761977410156539.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":152275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1704], baseline, precision 8, 1200x665, components 3","md5":"deb07271e2fe9ff50339ea233b2942cf","sha1":"8a980d9c49336221cdb7fe0c13490fdaf763d398","sha256":"743c7ad646d7b0bfdf0c28f32eaa1022e3e6e8629e29e6e2b541d362c6e2572d","sha512":"5c2a118549a8a6cc50fa9622eaf16416d36fe242fffbf2ff5d5d6531e2ef5b248fb8124f34426c288ffd982716d9bba6bf20a005995b0e6d7cb7c890e2a7794c","ssdeep":"3072:tZVPDXbcPKyPlxB5EHlH+a9+sF9AOO/ynf:hDXbcPj0+fsF+ZKf","tlshash":"e3e312b23970c81df5e4943c122cdb9913f2bb647f634a85f5ad761e73227120e1d2a5","first_seen":"2025-11-04T11:01:15.258476Z","last_seen":"2026-07-03T01:37:56.589395Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240409/1712647323234498.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240409/1712647323234498.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":828763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"6a0bcbb7a60024fd5178b1102a82d6da","sha1":"bd63bf832beb3733ff9c3a62614ee7d976fb030c","sha256":"1cf2fb3f1b08203f9473bb6c8802d5a949cd20c278b1a0af233b4cfcb73870ad","sha512":"cbd5ea4e07601ccfa244ea427a26e73803853095cb1dd0acf96fe689cd75f6fac47510309ee83dc4c0a350c25918fc04db843f948bb698d1d73f5b442854a2b1","ssdeep":"24576:wMx3T4bSsR0NE2fR/SHl2VuE8xlcY28JDFj:FT4GsMfRs2n8xlcY7JDN","tlshash":"c30523c4f0e9d0eefd7e20328532726199d1b2d122b93912581995f4f9bdf11a68c7e3","first_seen":"2025-04-19T17:22:25.386176Z","last_seen":"2026-06-30T15:18:06.834444Z","times_seen":48,"resource_available":false,"data":null}},"time_used":2350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761978073711899.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761978073711899.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1200x665, components 3","md5":"fb90d6ddd18c1fb680877156742c7419","sha1":"37d7c53e0625ba21e736c81df3015aa87c4c40c6","sha256":"5e5f5847c9dc57b4ccfc0df4c796d22869eee67de252ed322b3f102e36bca3c6","sha512":"a0b5f0fef9a5e22f1d5d22efa8948213bd340bc443041e4ee4c85b67b398ceea1c5f6a0b5854ed562409a46c359958e799253456f4e7e6f7b8eae413412cc134","ssdeep":"3072:Pek5EyjtIIkhfDXvxDrYWV030I9/95nbtJ6/tyu28NOX:T5EyjtPkRDXvFq5DnbtJ6Fy3","tlshash":"85d3023aca535bc3f6e26730f8cd9095e3d4420897a3918139ee925b37761f648a7213","first_seen":"2025-11-04T11:01:15.281381Z","last_seen":"2026-07-03T01:37:56.586819Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/close1.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/close1.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 53 x 78, 8-bit/color RGBA, non-interlaced","md5":"7bf9e13f55ec284896db2703a12480d8","sha1":"d7ce3a7c6cf2d1c9e757c9f07a8b97dd9e0005f3","sha256":"7993fa0041ddae232a57acc5598ae556c75cbf2a21c4666cca6402821356aaf9","sha512":"9469cc79b29dcf4b08992a79f951df3f24d63a1c5c40d1643c35c2b155df16c84bf8c57a62caf30dffa9edd1f6f3ffdd6ee1092384a4db6cb0dcd552113973da","ssdeep":"","tlshash":"4a4108ace9047681b17cc7a51ade64aa5bb2c9a00d90d0505a9ec0b798620fbcd2d9db","first_seen":"2025-04-19T17:22:25.334519Z","last_seen":"2026-08-03T22:28:28.18026Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20221117/1668678172455983.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20221117/1668678172455983.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x495, components 3","md5":"0d96be44450e91c00da96403543f396b","sha1":"b43351e528f82495e5852036f7f0c32ddd4ec0d1","sha256":"e83f015bd795c2fe8953587afb6a9b8553d757da0a309713afb004e8880a3b42","sha512":"bf73e0165b42ef1f22cddb8e3b62f4ad90822655b11de02b1b6768c22a6923a0faea244b04f8bd7989ce14e3acc9e58d7005c5e7308baa6f1cb085c8273eba46","ssdeep":"6144:c1oc9THcWQKhGu4g2tiawHb9Vs+J60w0WbqZn:oo8QhYawHb9jM0ZWbmn","tlshash":"7e1423911422ff90f0da65652f0e42066248e773de5bb8bcf66471676fa41f0788ce9c","first_seen":"2025-04-19T17:22:25.362126Z","last_seen":"2026-07-03T01:37:56.581308Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260323/1774249410679605.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260323/1774249410679605.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=美图秀秀, datetime=2025:11:29 16:58:14], baseline, precision 8, 1200x665, components 3","md5":"62a0c76ee60a9ce72978fc4476c62c97","sha1":"c5614486af137d0aee700824496af1bbc539d8fd","sha256":"e6e1110a71619656bf95f8a307d03393a686d37670313a709d225b746c557810","sha512":"b7707880de02d977e46e17158df196b99539e5638065f566877ba876fdcbbd592e40e79629800f3859941a30e5da45c31f96dad36041bc9d952eb0444aaa4fde","ssdeep":"3072:k5H0lVnfbsQS+j5ET7WHR//U+deHrozmAiPMkbUFpNCo8AxYpdLHrMPEPdCGzuTF:KMfvSi5EXWHR/OoqNmFcvLLfSHTrAzy","tlshash":"1344236cd6f826678469d8369309190961e2684248f56f45192bce3b3bcdbb733dc37c","first_seen":"2026-04-02T10:13:29.151376Z","last_seen":"2026-07-03T01:37:56.627177Z","times_seen":23,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240418/1713417487461921.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240418/1713417487461921.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2024:04:18 11:52:30], baseline, precision 8, 1200x665, components 3","md5":"e976ed0527bfe6ec3fb8ea3edd5843fb","sha1":"42295984ccb34b965712ac136ed64b57b019b95d","sha256":"ace4c2d9e230718e014017bd567511860b316464fb8b458aaee26675b563485a","sha512":"3852f53a9f2002d26a3b6a36f0dd13047a3b0316e5103a997ff7a2cb5073b14340a0acba5fcd540b517f5bc2d969b64a6336dcd425023c072774f8efa8af7a53","ssdeep":"1536:Eea0TDX0CjyhfhIxHVEr4ODbBw+VtbcdsOdOJpoIlBp6QDt2uUSFAFkZTF9mug:JToCUGCxBwQAnd0orQDBH+kzg","tlshash":"69c3021b2389dec7fcd03835e57ddb529211ae2848d327c938ec7a07af613905629b53","first_seen":"2025-04-19T17:22:25.308024Z","last_seen":"2026-07-03T01:37:56.608027Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/top.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/top.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2c4e7a78536a5051d163300ceefd3cb2","sha1":"c7d41b5de3afc781a947d78905509e8047fe29da","sha256":"f01b34af31c9c0ba7c659113b857f7fda6fa6cc561bb8c330901f4f1d6fcd563","sha512":"811c71672761f445b649bcea5e4157acef26e263d099c23355a4b57bbc74bf435eddc4fae0be4f7e78f33721ab7a14f6d4bd9898879fd80f74400beb8f9e47ce","ssdeep":"","tlshash":"5f41f989f9103502639dd48114f7147a6721c4c0cde4b8e5fc0fd65a8e344f4965dadb","first_seen":"2025-04-19T17:22:25.321957Z","last_seen":"2026-08-03T22:28:28.199573Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:27.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nCookie: Hm_tf_zjjhmvlczo3=1776051685; Hm_lvt_zjjhmvlczo3=1776051685; Hm_lpvt_zjjhmvlczo3=1776051685; __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%225e764193-1443-561b-8105-5c0239f2aebb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201776053485348%2C%20%22ct%22%3A%201776051685348%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=e6d55e04-c6c7-5abe-b860-0ad2534ea37e; __51vuft__Ki3Am2Z8sqj2SDaC=1776051685353\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:28 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.570289Z","times_seen":6792,"resource_available":false,"data":null}},"time_used":2114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:27.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Mon, 13 Apr 2026 03:41:28 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 20 Mar 2026 15:40:28 GMT\r\netag: \"69bd6a6c-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 87\r\naccept-ranges: bytes\r\ntracecode: 24012048080524064266041211\r\nohc-global-saved-time: Mon, 13 Apr 2026 03:40:01 GMT\r\nohc-cache-hit: gz5un63 [2], jn2uncache85 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-08-08T06:06:10.664094Z","times_seen":23530,"resource_available":true,"data":null}},"time_used":2054,"timings":{"blocked":887,"dns":312,"connect":276,"send":0,"wait":276,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A3.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A3.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"646700a9abd72bb25982b2a204c160c0","sha1":"a5bbcc7b3664bb29b3bc4b24c13327324cf0421c","sha256":"5145ee2039f6ecae4c069794da076ea12dd4872c0bbad78bec770438eb908ae9","sha512":"af8719dd75286f4e82d841dde072eb4397029f61da740c39f48524f25f6a96edf956bdebce78440fd8390c0a3f59862d48a6529ee59967686db4ef0ae4095fe0","ssdeep":"","tlshash":"eb21b6acfe0039c1558dea8235e6906b9f534d40e6c1e0e6addfc02b18312b7095d9eb","first_seen":"2025-04-19T17:22:25.397017Z","last_seen":"2026-08-03T22:28:28.183918Z","times_seen":65,"resource_available":false,"data":null}},"time_used":2101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240329/1711695645320296.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240329/1711695645320296.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x770, components 3","md5":"0afd5ce54628c44fa4564a2a4681ef06","sha1":"9307899b10a677ac12825509ad2deaa2d4bad33f","sha256":"ff359505c22512fc067a5adeb529ca9cb7771b7509c28061f62e40573c1ae734","sha512":"8f4dd0225520edb05bc44feb2c4b30934156442fb751a39182d56c4ecdfee19ac71abd77f3ec71218db42bfe0980c593aa54054da10140cd0bc1bf71b21960c8","ssdeep":"6144:/MSzw7pM4EqY+IC7zRkIfdjZtPJWEWsOqg106sWtP/:5zoBEqLP7zRl9WEWsOqK06Vn","tlshash":"0344237eef91b4a5063a2be3c57c82b8d37b80049a47b19e04058f945d6efcc748d6e8","first_seen":"2025-04-19T17:22:25.337106Z","last_seen":"2026-06-21T14:42:37.791962Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/layer/layer.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/layer/layer.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.517244Z","times_seen":6110,"resource_available":true,"data":null}},"time_used":3111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"35.220.147.2:39003/","fqdn":"35.220.147.2","domain":"35.220.147.2","tld":""},"ip":{"addr":"35.220.147.2","port":39003,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"35.220.147.2","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:61:49:A3:5E:1F:F4:C1:2B:C5:CD:F8:31:7F:0A:F5:F6:5F:8C:11","sha256":"88:A5:75:61:A2:E4:67:A2:CC:4E:C1:A4:EE:BB:4B:80:78:D2:A1:4D:FE:97:D1:E2:A7:B0:8C:D3:AF:07:0A:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 35.220.147.2:39003\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8b181bb6767bc5795dcf17341a387e5b","sha1":"b5e2a9fb1f8a4aad3c7127c769af4c780b47bef4","sha256":"32cbc376cd769a26d108ae31678f975b863b7066e110c59d9a212c7281bd8c81","sha512":"2550b61ffa1ef8dd2613704798e3a717321c8e3569849dcbfb3049f441b8bccf9287b7139f3cef3371c1bb0476da31523e5e83b6a81af3ebc4d91142e06c76c6","ssdeep":"","tlshash":"07c08c2a341e2c0c97a321b616c36a60d192c3308a5a28104700025330c30168ac3329","first_seen":"2023-04-05T08:34:05Z","last_seen":"2026-08-08T06:53:21.288581Z","times_seen":10666,"resource_available":true,"data":null}},"time_used":1763,"timings":{"blocked":757,"dns":0,"connect":249,"send":0,"wait":249,"receive":0,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761984415239909.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761984415239909.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1994], baseline, precision 8, 1200x665, components 3","md5":"cc7f3a06766e2809343186ae686720f2","sha1":"937301074bdb92a98031b98dfb149e69df4ced97","sha256":"d0ccecadb3159a22bd6a173f22e0020de4866f3e53c6ae8d97bb51552c4786ac","sha512":"797e60551f1f65db573c690340ffdcf9ec7d1b8dea70169557ecfddaa8fee4d31ce488255f8b5516e74e56c36ba96c6df41f533a2d91f0b233e2619e87a28479","ssdeep":"6144:TpwIPoJPYkrrfHSVRdRFiMClHw3Cc2isasPN8Y:T7gJHfAzTOQ3Cc2iJs18Y","tlshash":"ca540261e071af11faab6c34d3612fdd62140b3b17c4521c786e9e8b739c1fa744e89a","first_seen":"2025-11-04T11:01:15.333978Z","last_seen":"2026-07-03T01:37:56.619939Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B5X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B5X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"aef0a261ff329f0acb360953c1a304b8","sha1":"0c95f72fde389d3fbd6183e4b996fda7bfea1e21","sha256":"99156947d22957f25c6ce171ea7a9d50e296e223be65d00e473a002a51e05277","sha512":"6e70586ec869c2cf7ebe10eebaf31b8e91dee5dd309f99d0b062e2b9722c8a425cea6991b094967fdc3c75395d95d4557359a1d0d9a79e376bd80e31ed234347","ssdeep":"","tlshash":"8f310909fd606ac05bdee58610f581fa86011b20eddaf92c38cbc43d6aa247409af8d7","first_seen":"2025-04-19T17:22:25.324418Z","last_seen":"2026-08-03T22:28:28.205523Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20210531/1622446321920854.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20210531/1622446321920854.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x665, components 3","md5":"efb37b6151e44dab9916dddb1585f7c7","sha1":"44f59e3d620f8847d4189e209702962d16d85c19","sha256":"76908d92f49357dd2c5119231d4ec7270f52636efbb0673c2a05b03f47f77ad0","sha512":"6777d91473588d83c25bff4fbe03f666fa58035db88fe26a01207b39d45bca43bac866304e9b6d5a22840da173ab4e76e790503c1abbfe51e943b16109473304","ssdeep":"6144:ocGwHGZaUU5iBGCRcYb/lSyEmaR2Lm8BNLkMhD0s7uAAFGJ:oc/cCqbjFAJ6NLkMhD0yKu","tlshash":"f54423ef7cec7015cbafc4a525719c8e5863531c8f4c57f29087b41dea0b8964a0a74e","first_seen":"2025-04-19T17:22:25.369965Z","last_seen":"2026-07-03T01:37:56.576603Z","times_seen":51,"resource_available":false,"data":null}},"time_used":2609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240417/1713337602996713.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240417/1713337602996713.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2024:04:15 15:50:20], baseline, precision 8, 1200x665, components 3","md5":"25fc61844668dd810c77e80c0719b9ad","sha1":"35c7cb41ebc21394e9ed6dc0315a47fe9d8bbc61","sha256":"f540bd6037820454ba7a4c19dc8e2876d6b7d72e8565126c91ab3d2613746086","sha512":"2966f5ebfdeccd8fef8f647d5902d31f4df9b56fbb2af9c036925449fc313df74b6df986a59742511d1821fa2e7666771f97c53ffcd34894db1d037f97eb3c01","ssdeep":"3072:RCZ65rjDs0VqEcDa0IlA9ABJKTA+VOkJTfP6zE+6rpy+Uhb8x6bxAZ:a69jDH1YahCaJKU+HTcE+6rg+ca6bxA","tlshash":"dde3126469a8dc25f5619a30c0e89a826331fd94eee312443eec2cc5f3757a16d8eb53","first_seen":"2025-04-19T17:22:25.35797Z","last_seen":"2026-07-03T01:37:56.586325Z","times_seen":50,"resource_available":false,"data":null}},"time_used":2608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761978279574383.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761978279574383.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1620], baseline, precision 8, 1200x665, components 3","md5":"0d0f354e79cbaa8c37e219018b9c0c5d","sha1":"9343499c5dfbc5e9a47bd94eba7cc66af8623f3e","sha256":"5f4563fbb5e2e88402930081e252681bfb0607528e60276f646eef37a66406c3","sha512":"28dcc7d4165e9cd781f2c0b65ec305e4ee4822fb352c528282be47497f460d7eef6524ebaaed1125db74efdf4013f8e56fa1e54152fde00b7f461cf84a8f6ed8","ssdeep":"6144:RPF27j9bJSxF01lOyn0YBTKEqUhmSU6gTQTJUS:tF27j94xoMZYBTK5kO6gTGUS","tlshash":"1444120a620e0e99c5daa67259f4fef568701e168957fbadb41f2b403372b81e6d4320","first_seen":"2025-11-04T11:01:15.246469Z","last_seen":"2026-06-21T14:42:37.781855Z","times_seen":25,"resource_available":false,"data":null}},"time_used":2607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/f_01.png?v=0.1","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/f_01.png?v=0.1 HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 70, 8-bit/color RGBA, non-interlaced","md5":"727e65a0a1081634bc7c97a7b51db015","sha1":"84ad6989a49638d76c9c17519cff21ad31a48ccb","sha256":"f95e66a78e6242fdb7001d42f6386c366b81b313cc8d3f29a20d47ff2cf4cace","sha512":"572e5a0ad4906c344638cd07ccbd5ea8bf9bad965bc69045ccc037d536b3acf6b6976c4e56b425536e650317bd7662b1177a867199eafa857361e7a6a78ef038","ssdeep":"96:lCjmZpZsJJFJmagmK7shCwWKoWWBahCDPr5dk+Pxo8W1azP1rgBO4ipRg:2SZcHM6KwhCd5MhCzXVJQ8+2e","tlshash":"eb915d9eba44a402d618e7611ee7d627d88244d058a0f3deb086d1476c381ff9978297","first_seen":"2025-11-11T09:51:58.895545Z","last_seen":"2026-08-03T22:28:28.180824Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/md5.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/md5.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators","md5":"c37a6ec65ad89108b0db1cd1969635d6","sha1":"d5f969b445ff99ceb2e1889565ac8f0ff6562b0c","sha256":"6952465d6319a8fb9b52d8266a77077ba66396600e342e8d4bebdcd689c43d5b","sha512":"4e4ceb444a6a74f85ac6ec3d7116b64867cd9c66de176088748239ad0d51de26808586d1333fbc2fa91608e0183d02242ccd9030283ce01b2c0aa378f701d048","ssdeep":"192:cmGLmnFUJQEh47wVNc6n4LaXa8LZS7UEJkRAvk/4jLGkP:cmGLmFUJ7h47wrcASwEJkWvkmP","tlshash":"c3122f48f78d00968e53e230657e7c96f0ecf138097892abfbdc44e276895e49768f91","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-04T22:29:49.303807Z","times_seen":201,"resource_available":true,"data":null}},"time_used":3110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node52.aizhantj.com:21233/tjjs/?k=zjjhmvlczo3","fqdn":"node52.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjjs/?k=zjjhmvlczo3 HTTP/1.1\r\nHost: node52.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nexpires: Mon, 13 Apr 2026 03:47:11 GMT\r\nserver: nginx, aztj(g06)\r\ncache-control: public, max-age=1800\r\ncontent-length: 11700\r\naccept-ranges: bytes\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\neo-log-uuid: 11986802011319636976\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35401,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"df3562d0678155927091eb466be74c41","sha1":"bc998c31cc04b2d0a83a7e4488fc7ae78960116e","sha256":"b60c172cf8baa6714ff47c3e3fc1c70afd81ac9ca2f86542f3d9e860a23fdd6d","sha512":"9894e0c0806e1e26c119f10b03d9e4bad88c3889c8ee22a956566f97cecbcd279897806c324b43e903f6ee459cae8fcc4f99aa055b50f11103cb6fe9f8b6d751","ssdeep":"768:LsC5kuNkdE4rDE93/8vupsHs27ZyXnD0T:ACOykdE4rDE93/6uYZknDm","tlshash":"84f2d7d632ca2536a27670a9d95fe50cf4b9aa1437d9ec44590cc0c46d208be83ff9bd","first_seen":"2026-03-27T20:33:39.469444Z","last_seen":"2026-04-22T08:57:55.917729Z","times_seen":28,"resource_available":true,"data":null}},"time_used":1452,"timings":{"blocked":689,"dns":246,"connect":17,"send":0,"wait":20,"receive":1,"ssl":476},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20211122/1637561812505783.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20211122/1637561812505783.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217498,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:11:16 12:31:33], baseline, precision 8, 1920x770, components 3","md5":"40bc44296c8ce95d66e14ae06e148f02","sha1":"ed771d8b9588958aebea4697e2697e901ac35aaf","sha256":"ea77e5f90f9bb8de14e38d302901e0cf8ed6643e6d2e28b14eadeb754e78d615","sha512":"31644985afcd6b0d9c6b2523133b79f21c7769b701540178a58e7b8aaab324ed686a05535bb42cc082d3f9ed0aba4850f16262f31e203ef753b6dcb409a308dc","ssdeep":"3072:DbrNA/+9c+dQ/JgWM4d4ibzhIyVsPvLzY+ZwwOWP5yKcHX4eJS2F5newEDBF:rNDqEYJPM4p+o+rJ/WXpJS2FFEDBF","tlshash":"c324121a07c89f62d995ab78892ab0077087738077c3f50ab9cdad9cb7f26e24cdd055","first_seen":"2025-04-19T17:22:25.366362Z","last_seen":"2026-07-03T01:37:56.622568Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/swiper.min.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/swiper.min.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65270)","md5":"9c379840216a38360bb9b9ad8e04bb5c","sha1":"8f8e72c0d949e844dbcd2040b5aecb03a946b084","sha256":"f2ce7eb089bba678231b3521fa0b5fd07bb67eb043256ec45306246df9acc64a","sha512":"37673c191a453ec903cfae87428b577f608fb2545c8a573ceb303e640453ab1c7de30d13913d9874a076cfccf8c807c0a9d90b863947e8a347436160f2b9d29d","ssdeep":"3072:QFJcpzBLpMI1rlZuGHgZsUOUFBWqcQhXG:AAzBLaI1rlZuGHAsUOUFBWqcQhW","tlshash":"94c3184eb39061a550e36256525e8241a3b72409780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T01:15:09Z","last_seen":"2026-08-03T22:28:28.199037Z","times_seen":418,"resource_available":true,"data":null}},"time_used":1584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260323/1774249205290756.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260323/1774249205290756.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1014929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"7ae8389fdb5f65a3a5a8afdc1e9a7c4e","sha1":"d5256da0585db5d61c9b80e4ea9308db535a1f48","sha256":"fad9f7a5b57ab12175f7e5effaf873110fc1b7dbcb0d6237366a88229c685eff","sha512":"6aca2605f0532c85f3c7dac211e734591e233e4bd7efd8d425fe8aeb7a8728e4453a65019f7c96bafd5a3437353f6261107470ef1ced41f3bf1c11435656d687","ssdeep":"24576:ySUTK7pMkhgTfx76VrRoS1PQFLyp8Q96fIyrS1A:jUKtthgTfSL1opsN6ALS","tlshash":"302533b8225c6a31e8d36a4045e1e4649ef89af9177f429e081cef515b31c2ecf797c8","first_seen":"2026-04-02T10:13:29.163203Z","last_seen":"2026-06-03T23:27:16.168547Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260323/1774250076230246.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260323/1774250076230246.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206204,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=3703, bps=158, compression=none, width=6000], baseline, precision 8, 1200x665, components 3","md5":"0d32a2aab1b73dd79489d8603f3303c6","sha1":"0a8aac5b1bdc2a740bfd0c28c09cd97297f9faa0","sha256":"dd9d21222e90db081feea5172137f8647b07ebed23311ef41dc7f381f1effe03","sha512":"133ffc57c3a8637662009d904b0a4c82836e2d5ae5fdcfccc7baadedee6043a9ca5301529ae4effbf8c9c6507e58bc9b1e9bde637d52ca05df14a13a7dfd87ac","ssdeep":"6144:tC+y+83+etvofEDLFyedfod+QF4cPuAZZ:tC+CHtvdvFyedfGFFu6","tlshash":"55142328cdf1942b8d1e753b4b2095b473b558c626693c4ee779ce1c3bacb841c3a6b4","first_seen":"2026-04-02T10:13:29.137483Z","last_seen":"2026-07-03T01:37:56.611713Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B3X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B3X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"413f1e03250868ab3cf4ab7b17dd7e0c","sha1":"9328e5ae6f649a60dad04d6b0f65b66852472cee","sha256":"c356c354fca1fc8161fd690bfcb84fd8789d19d0355e8c663a61707537a5c90a","sha512":"5e3020245c2de01c4e657b03f0c55fd4c00442d3c7fa1cbf9f83697bd710afe651a9de161957880f3d9b99c747157bd5a30caa170f9157d5518c703b6e821ef5","ssdeep":"","tlshash":"3341d744f741a892924ba2c134edc4225d329e80edc2d5257dcfd0ba59b21fc6ee91d7","first_seen":"2025-04-19T17:22:25.355689Z","last_seen":"2026-08-03T22:28:28.189135Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240329/1711704574709631.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240329/1711704574709631.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2154437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"b7e8df865dd922644b1a2cf349bfb8e6","sha1":"09dc03b959d5d72ead57f3d472c32de27df54098","sha256":"ffaf0280a10f34494a16d186dfa550f0cbcb7fdc2b7f44d2ac87260c708d5f0e","sha512":"39fc87f53072bc2d1744c490e55966d99ecdbf28aed41429e769d6157b359b735e9cad56deeefe3142c8a849908948a59931d1740f2b8236e2a7259848ea6d00","ssdeep":"24576:s+Rl/z7v6KD0LMMjzlHFu1gdw7pfZHXbnqgVOQVm63V:3LL2u0gMjhHFu14CfZDHVOQo6","tlshash":"372533f511a339d5e366e6a643cffe912b3c21d9cef8dcb8410cc791259a112fe29126","first_seen":"2025-08-20T02:11:19.358556Z","last_seen":"2026-06-21T14:42:37.765789Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20210731/1627723657762922.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20210731/1627723657762922.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:07:31 17:24:57], progressive, precision 8, 110x110, components 3","md5":"bac768e93b1d6ebd085c5f276146a660","sha1":"5774a6408f8799945dc9acc794cee9670e49ff51","sha256":"50b14f230387c6306de0dbe509e23500616877cc654c1b2ab636101271d563da","sha512":"7a4283fb4b04da829a74c3c9dab864e45cabb3eefa8bf28f2b567dd06817ee522826396297f91c2ff80f4062e32f5860bb0e89457311bd690b9b31671f837d26","ssdeep":"768:lH/YIY8z9wPnH/YIY8BcqYyZSx2CdApRSD13rC/39H1K6:lgf8Cgf8iqdSx2CdySuvR/","tlshash":"baf2bf3a9fabae41fdd1273418f5c7d59300afa9f7932252749d6500bbb42c4799c0a3","first_seen":"2025-04-19T17:22:25.311434Z","last_seen":"2026-07-03T01:37:56.593299Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A3X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A3X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"69e56e7d70bff2a9eac5939745977bdb","sha1":"74c37477706b85f972d2c1446cf0bdc37b5b65ee","sha256":"fc8fa0c2cdbef55f48d4e367133c5a7c3a9d2fca8ad4bea8c171a1ba7dad0ec9","sha512":"7ab3de569ddb0cd641ab92b0a1f93034bbfc8b9dc73efed4b1feaafb825dad7cd103f1c7cdf889cb3adf1bc3b18c87d5a9cc5f4ce30b963e44676189aa6e49fd","ssdeep":"","tlshash":"eb21d858fb003dc2525deb8114f2807b7e220580dae0e1e25d8fc01966721fb0a588db","first_seen":"2025-04-19T17:22:25.307328Z","last_seen":"2026-08-03T22:28:28.193646Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240409/1712647703167251.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240409/1712647703167251.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1405016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"afc05733c69ee487670a5915e5266095","sha1":"7c04e5c916f885f4e77171d331858e156ca2c294","sha256":"a626bd512778c89efc73e16c75393300f69de01ab03f3ff9dec8e9a0970633e0","sha512":"62f3e94371fdd8b5483bec7055aee7a529179a815f22e3c81631a1704be4b7668de7659258492dd1f3c2fd1116b13417ab318a27394b5cf27061c43e7c70e7d9","ssdeep":"24576:DUi3c1vVo7OGVgMn/QGfPw+MJ6RNUVZ9LAaKmoB:jM1t/GVRFfPw+baHq","tlshash":"b32533b8ed1d22b0f69ce7f2681890113ef41701565cb573512afad9d88a8c84bf8f97","first_seen":"2025-08-20T02:11:19.379925Z","last_seen":"2026-06-21T14:42:37.764583Z","times_seen":38,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B4X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B4X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"8d7152bfa1ccecff3a8e0bc8f5c3ff36","sha1":"1b15531b5c83ec4f0e0412108b49fcdce988ab18","sha256":"bc0b05ec5385d2940abf4475746610ab42735ffe801f5aa791e4bcca60537d2f","sha512":"6ae45e9ba502380663b3c9af3948d06f0f56eb590a5de8859584f99ba624a7f19a45f92a6c81aabcfc5a3bca1cfaa9da695478d36a7780e4af320a58321455bd","ssdeep":"","tlshash":"96411cc5bc101d4056cbfac20ce78817fb1939c0ad91b0ba6cd7dc6865e2675061e1d7","first_seen":"2025-04-19T17:22:25.363153Z","last_seen":"2026-08-03T22:28:28.189795Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/distpicker.data.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/distpicker.data.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44698), with CRLF line terminators","md5":"8d5c08845527aa740b6764fd4167c022","sha1":"69360c10cc93494dc4d345ac4bbc1952bdf73f19","sha256":"ff7e182a4cddf5327a81c0f6543f5386223b7326359abcb1d294defb04999143","sha512":"43088062304bd5e7805f54569ae2e8d3c47242ef0db91f6974e21afc301de9a5d99f9f08320bd24fc3d964e31789d86076dc1b0cb7ed8bc3759ffe5bc4fe8a7c","ssdeep":"1536:IRunfojphRPlnEnZfl+YAHBjDFWedpj7ZAvUmixdfQ7/T96BQQMOc0cyzlxrAL:IRunoph3n+2BjxRbmvUmkdfQjT9YQQMl","tlshash":"3b6344505cfe3a6535b681b2eb17857cb0b90374d1e28c2e59b53f808ec9669e3f4932","first_seen":"2025-07-21T02:08:02.548446Z","last_seen":"2026-08-03T22:28:28.203159Z","times_seen":56,"resource_available":true,"data":null}},"time_used":3109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.bbkchn.com/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:28.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.bbkchn.com/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Mon, 13 Apr 2026 03:41:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":3549,"timings":{"blocked":1615,"dns":838,"connect":248,"send":0,"wait":319,"receive":0,"ssl":526},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A4X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A4X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"aae3427db45d4dd2d3b1bea587763d02","sha1":"909a9e916d53fdc1acdb908fce821e98846c06e6","sha256":"14064feb0d8f9939a85b9a9f4b9b6af6c4aef0ed699d16bd97060731e1e58ad1","sha512":"04a428858d9ef3aa6abb5a92848f611c62e7a83a2692e22516b3bc0d36b6d22b73c01ca9660e7501315941db9dab6675d019d6174fae4828653b563bbb629a32","ssdeep":"","tlshash":"a431eb06f501f883d47dd5a919d4823bda104d50e5e1f0422dced0a91df72bb0d85ddb","first_seen":"2025-04-19T17:22:25.389622Z","last_seen":"2026-08-03T22:28:28.19573Z","times_seen":61,"resource_available":false,"data":null}},"time_used":2099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2099,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240409/1712647555924588.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240409/1712647555924588.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1411830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"f469fb381b20ddada39090c9645b6370","sha1":"26b9bf54a81cb5a8a771f58e7f8525f7d4c365dc","sha256":"18ecd966bd5698cfa85a3a0bf919b659260021e1792129c1bc01ea330abc6641","sha512":"ab4f1484e85e06e5488c7aaa333cc8c6616f12ff3259f9b100c8d448758656a6c62e84675f8e02aae99e450f086e5fdc934582b8ebc7e91cf1b838a70f82d13d","ssdeep":"24576:/C+rhh1VzUVOg7IEehnAyl7MTen2uP6/nsV9:/DT1m4xxnA6MTe2U6vsV9","tlshash":"512533b1d2e70ac3d89b7a0d08886a1571d2813a43341d599fb6bedd4eacc116ed8fdc","first_seen":"2025-08-20T02:11:19.367392Z","last_seen":"2026-06-30T15:18:06.804355Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B1.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B1.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"1385ab43ae2d6e38ef1b78e7cc7d9b18","sha1":"2990d92a97bedb4f1ed0f2f89153e1d8d76253d2","sha256":"e37a6691c7a835d83784933cf2d407de25e0c8002d924d3aebec85087b6cc5d4","sha512":"0df8f91f85fafcbaff407c2dcffa295715a0b3cc8ce4c8d73e9766f97a856536d76f01338f1b2f6b28e0f80a0fdd34a0dd85099a6b1b117829432e0ce78e6d76","ssdeep":"","tlshash":"2c410b0db9507ec190daeac360dd403b5f3f5d90859ae1329b4ec49f2c312e61a656cb","first_seen":"2025-04-19T17:22:25.333369Z","last_seen":"2026-08-03T22:28:28.196424Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251029/1761707176384215.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251029/1761707176384215.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2025:10:29 10:39:15], baseline, precision 8, 750x495, components 3","md5":"2e4039214093f282347a969b4ef5dfb2","sha1":"fd9545961b9320fb808c268feba53ea91ebfb23d","sha256":"bd9a97db5f601b2b72a6811bf3abe554993851d0ca681e3af9e3de342085f7ce","sha512":"5e73733efca09ad4bf73132f3b333b0e1dd0f3615c4fee0a40636272ea171174f5e3c6ab907eaaa43892cbea4e74d00db549ac431a834344f1d5ccca932530b6","ssdeep":"6144:kiEiwcu6mSJa8u+i13RQCiTzVXMw7wPHtXyE16EbUiN:kPjcuPM5Dc9vtXP1jYW","tlshash":"dd649f84b0580491894d3a6cd0fcda86d3f70de10e74065f27cdec85ae6ae6d4ed9acb","first_seen":"2025-11-04T11:01:15.303561Z","last_seen":"2026-07-03T01:37:56.623137Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260107/1767750478748041.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260107/1767750478748041.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1635 x 253, 8-bit/color RGBA, non-interlaced","md5":"a7fb9ebd3c86558a310d53d39ae89905","sha1":"604550c0486ed4660689d29e7718bd707cb3c2f7","sha256":"a0c3057edb5272a3e8382166fa2829914c440ac965ab020a8073127118c35076","sha512":"fcf7d516d4679ff20294bec8e6a7aaa2779b41af7d73ac88c7a8321c289ff636e6e453d8a8b36bb047834d9376cc702469b5c0ad45719da1f7bd0ae88f7c9d3f","ssdeep":"768:2JnJ5EaAzeqHDHIsSt9fF2GFRrcQEKGhmfdBIf:Un/EjzeqHsj9fYcBcxK5If","tlshash":"6ce2f101c08fe8dafcce78707c99b1f751771b6d6c83860a32b09a17ad614ee194da93","first_seen":"2026-01-13T07:16:23.400341Z","last_seen":"2026-07-03T01:37:56.580591Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:41:21.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95241,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"60f48eb6862b2d5543422edb92f65ade","sha1":"50ea843588c154ccdd2105cff9f78a70e7ac06c4","sha256":"209001d93dc4a407226d3c7e122f1af34f01e19759678e79a0d79f5436e45417","sha512":"0b5f487b240f9a9cfa933f5d8d786e392bdbb5860a8df0fd27703bf5b384af733d67d0e1cd95cef940416530458ffbdb22ee89c73b82cd0c38b98debbd07291b","ssdeep":"1536:Xha4jHGvh+Hk06DxJZX9HXcn45FfDMcUGs:hGvEHCJvW","tlshash":"a6933e17457910771313ebc56cb98f1bb8a7a60ecb2f1e007efc21e40b90da9abad551","first_seen":"2026-04-13T00:19:14.302949Z","last_seen":"2026-04-13T03:42:00.897072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2815,"timings":{"blocked":610,"dns":56,"connect":263,"send":0,"wait":1592,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20211213/1639367690343725.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20211213/1639367690343725.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181333,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021-11-17T10:38:39+08:00], baseline, precision 8, 750x495, components 3","md5":"76d49a9c243dd0870d38ec3d42e4c50d","sha1":"aa478dc584f1d7d7038398079b4129db1f7ec1d0","sha256":"ce20d289f847ef2bef84d8a4eed6e9e69d2f36b623e4743747b1d771854430df","sha512":"6d31bb32680c35bffcbfd31a2547310dd5440128fe5396c6ade3450a2004abf571b07db5b1550bbeee5b9d0cc8e8032ea86c7bb18071e0097c53ed72c60fc043","ssdeep":"3072:JYTO/YHjqR2qYKR/4kIVAuq1Fqh0Gwav566xInVgxE79F9M:iq/YDqR9LBItqfa5dInVgm9M","tlshash":"a20412ad3d051b3d97f782d11b3a4aa93f32ea85a913d52d2c48c8fe49ff52b1d4014a","first_seen":"2025-04-19T17:22:25.3186Z","last_seen":"2026-07-03T01:37:56.601276Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20190107/1546848147422783.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20190107/1546848147422783.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Windows), datetime=2019:01:04 11:04:37], baseline, precision 8, 1200x665, components 3","md5":"96be500f8ea06171d062a09819c45b6e","sha1":"62cf847eed58b601dca3c6216a313739b525f928","sha256":"3fe45b497de08a966d8aa649642ca46d5889bd92ca85846ad6fd0fd98df3f9ce","sha512":"a225770d940c60acf2a15336797185e65495d980da396db27e163ca6d0f6d7649655bad10594b2d9d148c95bab1af5c7f91f539b39c93de647f2e9ae39bd1c5c","ssdeep":"3072:6p/Jp/qqNM9rOIf2QIJK0Gn1Uu/k1h9wE4Da58yVPr5ZHtMMBeOJQQ/ByiN9I:6lJlchWMUFh+Ec5ePr5dvBeOqQprbI","tlshash":"e724125516a84fa5ebe8c079d1a8e634de80ed95b337f25271fc85943f643c09e04fa1","first_seen":"2025-04-19T17:22:25.392294Z","last_seen":"2026-07-03T01:37:56.579061Z","times_seen":50,"resource_available":false,"data":null}},"time_used":2853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2853,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240418/1713411154293968.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240418/1713411154293968.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":135964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x665, components 3","md5":"dba083709d27e4ba42b3dac5d061a00e","sha1":"481513d9a69c47ab8d647b9be82ea730d3b93451","sha256":"31207adbaea02f8fd2892b8168eb9cef16345eba12f88bff89ef445438d68af9","sha512":"1d9b9dc2ee73a384e687f01d25914eaa5218af18c8b33c741a2e3e4c9f4e045c1afbdcc5b8726f1b6e73e3462b4d00072dfa307b18e1f7c6677dc168132da1b5","ssdeep":"3072:lHN+NIrbshf7UuYTvVFVnlzKQ/sfzwQjz8FrcGSSHmNBMd/:F0IXshfHSnnlzP/OsQ8FQGSvI/","tlshash":"ffd31278e0c0bf7304e3e77c9bb73c6525212694a5a4d35c3b89176e9bc16d14980be3","first_seen":"2025-04-19T17:22:25.316758Z","last_seen":"2026-07-03T01:37:56.607142Z","times_seen":57,"resource_available":false,"data":null}},"time_used":2355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20200715/1594806948692556.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20200715/1594806948692556.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2020:07:15 17:54:35], baseline, precision 8, 1200x665, components 3","md5":"b0c68c9b4fc68016a2cae2de9bd7df54","sha1":"1b25c6267541a1a5dfbd88930dbc8948dfe4233f","sha256":"6a310c13ffd7bb6f2e5204d8ce5ded91c7b534f9dd2a7b96b7e9d0ee38443ebd","sha512":"6c1d7a6a97eea6eeda17490d87a3cfaf74225ba8fa85fd49fe583fb0c39297c13028025667b2b4536e43b2c5160e0417fd5bc8449ef77cf85b0a309931894e02","ssdeep":"6144:VHZHx8o4+5MlSbrKa/GJ3j++TVMScQLKIOQp8rdRVFkbLAo:p9xdiPTvpiMKW8rdRVmbl","tlshash":"0a54b3a68971bb01ea66196463a47bab100c6c2f47f5431cbc5eca8b3757cda30dfc42","first_seen":"2025-04-19T17:22:25.395062Z","last_seen":"2026-07-03T01:37:56.57444Z","times_seen":50,"resource_available":false,"data":null}},"time_used":2866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node52.aizhantj.com:21233/tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=817093851\u0026si=zjjhmvlczo3\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=53185\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.bbkchn.com%2F\u0026lvt=1776051685\u0026tf=1776051685\u0026ej=1","fqdn":"node52.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:25.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=817093851\u0026si=zjjhmvlczo3\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=53185\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.bbkchn.com%2F\u0026lvt=1776051685\u0026tf=1776051685\u0026ej=1 HTTP/1.1\r\nHost: node52.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bbkchn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nset-cookie: _aztj_sess=ubtl4h4uhn2ehm7618nag9abrg; expires=Mon, 27 Apr 2026 03:41:25 GMT; Max-Age=1209600; path=/; secure; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-mtj-pc: 28\r\nx-mtj-ml: 1\r\nserver: nginx, aztj(g06)\r\ncontent-encoding: gzip\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\neo-log-uuid: 1024457654802354632\r\neo-cache-status: MISS\r\ncache-control: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-08T06:24:55.834958Z","times_seen":756912,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":44,"dns":1,"connect":19,"send":0,"wait":858,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.share.baidu.com/s.gif?l=http://www.bbkchn.com/","fqdn":"api.share.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:27.435Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /s.gif?l=http://www.bbkchn.com/ HTTP/1.1\r\nHost: api.share.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":1146,"timings":{"blocked":1146,"dns":0,"connect":254,"send":0,"wait":0,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/jquery-1.11.0.min.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341), with CRLF line terminators","md5":"a1cd7fc161a5cb1d7102d1e72ee1e67f","sha1":"295153b52a34427bcaecb4a55c0aabcca825d544","sha256":"af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee","sha512":"6ecca8caf3f553b90ebf06b902b421b83fbcf2c863e3ca075c1356d3622aa72a56e2dbf3feb239547a5f0ba729361db0d3326ac33e970674dd22a1d883867898","ssdeep":"1536:1PpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jFkODZ2D5N9Rag0MOIdSZAgttoX5Y/:UIO4e2D5c4LgtDmLja98HrA","tlshash":"1493e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-08T03:36:25.634859Z","times_seen":2332,"resource_available":true,"data":null}},"time_used":1848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/icon3.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/icon3.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 44, 8-bit/color RGBA, non-interlaced","md5":"60e5aa5d71748907a7bcb540eae59c14","sha1":"e0355c9f98b48ec549b8d56967dfcb37ea43f41d","sha256":"7a5439ef3a22cdf900deabcba5c584cf455a4bb77bf1b548c44b7b543d9ac2ae","sha512":"387a842b9e0fecfa2c1200d2c46e17959364028bb94ce718f2116244f9ba65fda0fc09aea73263524195a145c94ea7105f26d9c8f8097696ebe14233870ec530","ssdeep":"","tlshash":"7231fa8afe413d40e4e9ebd336e6606b5523468099a9f0b5e9cbd1020d311f6cd8d7d7","first_seen":"2025-04-19T17:22:25.388718Z","last_seen":"2026-08-03T22:28:28.204934Z","times_seen":68,"resource_available":false,"data":null}},"time_used":2107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A4.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A4.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"5aaf2bf64e5fc8f553d5c6a6736c76f7","sha1":"3e7ff95623a05af5ee2343db4e29b348f7dab556","sha256":"f784cfa465bc3b0b2c19a7b066f62566f80182aef44c0b35d97b9e4352bd85f9","sha512":"9ce532af3bd2d1f8c9d545449cf3597f26eaa9b1e7bd275d9a7fac72486274fbf94fa9000b6b8d329bd3357b5b979f7d59294ce35fe4d26f28bf3ee4e9249afa","ssdeep":"","tlshash":"fc41fb4cd4007dd061bde58755f6803b8993809089c4f89bbccec0775db02b907a54df","first_seen":"2025-04-19T17:22:25.349415Z","last_seen":"2026-08-03T22:28:28.194153Z","times_seen":64,"resource_available":false,"data":null}},"time_used":2100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A5X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A5X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"63252383f6e9782ab7403ae6e56e2ff3","sha1":"dc48ebb4f5d4906f5e78964821b065c1af423e0c","sha256":"64631c0500b80970a218a127dbcf9a55d77e9eff7c17cbf9d60441920184e9f5","sha512":"a1b50ed9a3edc072c846be84c55d9f8f732e2ff42cc874ecf74584205dc8d5e77f7536ce56a46c643e812d4ae77351c7cc0c95e6b082cb3dea4a1c34e1e1e0ad","ssdeep":"","tlshash":"cf317485ea006842524eee9138aa80779b518440d5d0b0b27dcba02a69b52fd1f5e5ef","first_seen":"2025-04-19T17:22:25.39332Z","last_seen":"2026-08-03T22:28:28.200203Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B3.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B3.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"2614691a11fc9338641415cb994a2732","sha1":"ed4172e76f5236abbd75c36dd71df99ec76a8a96","sha256":"a08b603f3d15ac32919efd792c28b56eecb80c6ece1a5b6b2d442f53fdf3e5ab","sha512":"98c7309c0c6de4df58df35971c4db7aa01e3018ef3b4e0de90b970bd487316a7fd6735d8ddf81e035945689e970b478f44505476a2bc88c6f3a9735580d0b003","ssdeep":"","tlshash":"e0512c49f9106582a9dce79112ea00e35b6308b0a105b819dd8ec47f08f61fad5b87d7","first_seen":"2025-04-19T17:22:25.39783Z","last_seen":"2026-08-03T22:28:28.197164Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20190107/1546848179206128.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20190107/1546848179206128.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Windows), datetime=2019:01:04 11:06:51], baseline, precision 8, 1200x665, components 3","md5":"358bcff4464305b00fa138cfb2f3811b","sha1":"7cb06d9201e29d4f6917df72a22eefc4d07f3740","sha256":"43d6c0a4305534cac76c302be2f8fa1b1eb4ceb56f7b5aa9431994dec48d54fb","sha512":"bab7e2c79e0fcdef654978e8a7cd905a7119a2d4e4429ed24ffa37d91d79b5344bdc1c2b2fb667c7baf85ebbec1d247e26e1d42e34034f05556cdfa78483b955","ssdeep":"3072:3vqCebm4z9RMBziTVfY37ZBsM+sZ+pUKxVLF:f2Xz9O2fYFBasZ+pUKxH","tlshash":"12b3015e5f61ed81f9e96839c899cf8be39219d4e3733124359e20583fa06c18e9d0e3","first_seen":"2025-04-19T17:22:25.341337Z","last_seen":"2026-07-03T01:37:56.624775Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/icon2.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:26.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/icon2.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/public/static/portal/css/style.css\r\nCookie: Hm_tf_zjjhmvlczo3=1776051685; Hm_lvt_zjjhmvlczo3=1776051685; Hm_lpvt_zjjhmvlczo3=1776051685; __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%225e764193-1443-561b-8105-5c0239f2aebb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201776053485348%2C%20%22ct%22%3A%201776051685348%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=e6d55e04-c6c7-5abe-b860-0ad2534ea37e; __51vuft__Ki3Am2Z8sqj2SDaC=1776051685353\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:27 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"51e83ca3ca5618b2c3da1de1f4cda404","sha1":"2bf128378e99478b1a01deee86d82f3d958a3623","sha256":"fb9ffef9dbbaa3dc176f8c97a7ad10baf418d7e530e26f37ed5f7c22588fc259","sha512":"686cd9923f97a4d52f8d69b3e402a47bf233c199ae50a07d0799f475e5cf55a5427d15fb8b74c582b4133a18c296ff2499f2024f27aaf0032830694bf56a2cb9","ssdeep":"","tlshash":"1821b61afd807a40a28cfa4321f754271f168d00d5c0e05aaccfc02f59b12ba891e6db","first_seen":"2025-04-19T17:22:25.338141Z","last_seen":"2026-06-03T23:27:16.127875Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20221117/1668678138346438.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20221117/1668678138346438.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244029,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x770, components 3","md5":"7e7e05d51b0baf8b61d97bb2fc2a0ece","sha1":"4136e1dc072ff5ddad38ad215ea9add8e599dd2b","sha256":"1d0746abc3e9d8b32b0f218b024c0f6f7521153442fc9f945f66bcfa2c3a5cd7","sha512":"487de967a217ee06020240e894c0c0674cc72d4acb18b6907d696f56fbeb08f89d37f59c347c1951acab2af4f9c4ee97c0a80f5b67b6111185f66880feb0d3cd","ssdeep":"6144:v9DL2D81xTXiE4dL6NbtI85fAQZxxIeHN3sUEG0XUaS:V481xDCL4NZAQOYeUOXU/","tlshash":"c634230bb8b5edd595246c32618e6deb33fca1e81fd72e28d9229a1035046f2f0bd551","first_seen":"2025-04-19T17:22:25.328512Z","last_seen":"2026-07-03T01:37:56.588494Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240418/1713410665258300.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240418/1713410665258300.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x665, components 3","md5":"89758940a64f30093a775cd9d1cf6b76","sha1":"19ea99a77acbe36189ac5cee46bdc61cef937aad","sha256":"c4abbbe936a0a1222226daaa19ce3a8eb4251984a07a3afce620a005253d5c6d","sha512":"55dd44fd65cbb845e5241f73eeb6346dc2343cfe941269bc178908c03ef8464ae8c87530d81c6a9b8b959633a2e45c04da49055ca2a1960f65872d6417a929a8","ssdeep":"3072:vZOTu2kWpWCrBRILi4EKGic3GRcaIvbhBBK:BOwxwYGic3c","tlshash":"bad31256b9748743c1551d2faafad35347c226af4038d8acb0774423ae3b59bf9b205c","first_seen":"2025-04-19T17:22:25.340296Z","last_seen":"2026-07-03T01:37:56.624131Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B2.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B2.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"4b8c625d2c954078c26b6b7d5c6fc6dc","sha1":"0d41436bb87d5c6569eee9934578eec6c2064f0b","sha256":"226ef5bc64baf6d9713989aa0fcccf7b60fc965c9ace029058ec5d2285cd9e7d","sha512":"a7f28eccf19b95a532fc900201a2fa6f7d4cc09065261b1b0ead052125a2af348003b7f1593d99289470d484ac8765013532277d8e8d457a2aabf74187154c58","ssdeep":"","tlshash":"7d514e08fe606e40ace9ff4121f5c5e76f21fb40500594423cda885d16b04b29d7e5d7","first_seen":"2025-04-19T17:22:25.35252Z","last_seen":"2026-08-03T22:28:28.194754Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B4.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B4.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"737ee1d80b8a6c7d17c5bf0168e1de90","sha1":"4475ad07faaf197e4fdd154206005dd79425acd2","sha256":"6977e42b1f292fa1b8b7a505f9f8a52be23c3be3281f58ff12bdf4b6057a12fa","sha512":"d3c22399171f3bacef29adf7d6a71bf6a00249904d62865701456f2f827ebb97b9b27acd43abb290ec6d30e105c0ad4052dace42f40f77f63b1532c49bf7e51e","ssdeep":"","tlshash":"88413c19bf817980a1bff74222d5e1439d3bcc04aa82d1633ccea0b3285517104d8aee","first_seen":"2025-04-19T17:22:25.309476Z","last_seen":"2026-08-03T22:28:28.195232Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20190311/1552270262372563.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20190311/1552270262372563.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x665, components 3","md5":"593381f9b40f5039ca2b94f7279aee4c","sha1":"0c6fcde4696227545bedd6333b920638894d154c","sha256":"740d3acb580ab46973ce50591ef47e1263a584c15c39404dfb03143daf0104d1","sha512":"0dc31f6dd44a1437d1e39a57ffdc6195eb0173b6c9f96e053ad5df1919993f5f17583d21261d90d1da9fe262cd20308642aff02fac9fc7652b61f970bd902b73","ssdeep":"3072:BNruK/7ffSuy0ffGLfffPIG9DAfffffRFBfT+fW552fffuDOqWOLWkjOe1jbp6vq:BNruK/7ffSuy0ffGLfffPIG9MffffpFr","tlshash":"62d3df947a7fd4d27c77e8fb29840e1a099c54c87c5375af8cd0b938b296b61d228cc9","first_seen":"2025-04-19T17:22:25.304526Z","last_seen":"2026-07-03T01:37:56.573281Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761978219905261.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761978219905261.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":193050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1200x665, components 3","md5":"46af7093601b6617379aeafd074576d4","sha1":"d06972d855b4bf7e20ed974130ac852b8ac5b599","sha256":"01c81a829c4edb7423b1c1b2fc447c4e29ed3221120cbea76b79ffbef0425be0","sha512":"fde5c282fa8e93f18e409008c75132aae5d41561866e22663cbf3ebf40b3000b8e3ba5f22dfb7343b4e05443ad954f40dff120d35ed609b8614ce6020f50cbc2","ssdeep":"3072:Vl8614F9rVdYncEKyGQALJWiP63K1ThcPyA+bPDgSJfntSpv0afo8bEdnPxnx0+Q:2LGVvAlb6WhcP/+JtSp8So8bqnPxnC","tlshash":"c51413abd2555281fde443b0e06a9f371424ecd2bb8b2540b76c3461fbe52a25c2f1b7","first_seen":"2025-11-04T11:01:15.336137Z","last_seen":"2026-07-03T01:37:56.577454Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?77279c5faf6215e854535dac98877926","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.765Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /hm.js?77279c5faf6215e854535dac98877926 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":7750,"timings":{"blocked":7750,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:25.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 315\r\nOrigin: https://www.bbkchn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.bbkchn.com\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\neo-log-uuid: 3464189832104129808\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/css/swiper.min.css","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/css/swiper.min.css HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19774,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19512)","md5":"bf3ee7b87c0f1578c7e842c60d864857","sha1":"d7e43a846b5e69234cebc5d734a4882f3118573e","sha256":"7d41cc80678502aaf3181f2f00f46553773fc0da93ab9290f2da2ae64720f1f7","sha512":"74f55d2835d9bdf2b70fae51db1a9e793d5142dc5715b76f4eb484fc4eb168b46e2b6c91db60c00a4fc018821a8d18b504382cc439ba53575dfc4d600dac4172","ssdeep":"192:dOaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:dOa1/lS0Cifi5o/mXOGJ5c","tlshash":"9492612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-09T16:23:53Z","last_seen":"2026-08-07T09:24:12.930076Z","times_seen":557,"resource_available":false,"data":null}},"time_used":1318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240418/1713417451795180.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240418/1713417451795180.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2024:04:18 11:51:25], baseline, precision 8, 1200x665, components 3","md5":"75fac765fc401581f633ebcfe4d6e971","sha1":"a60892a2ca534cbd3a9ab935fe211f085c5e9a52","sha256":"c43bf965f17d62343ecbc3cf34c795f4f40b57cedf0f7aaea0ff7ca38f2779fc","sha512":"b994f6e0ba6afcc931b814901b510738685966aafdb297ac7980a95f61feda9088802ddfe2091e93d6639d2646841779afa8f5a55cca82baa590cee9677efce8","ssdeep":"6144:JlssjE8Q6LZ34STbaFI8PddTI3lnIIYgkPVdDG3V:PbbQ84S/a68ldTIOcUVIl","tlshash":"3a44e0948872c73af9887438d325aeaea512033f1582976d7d1c3883bb501cdb65e5fe","first_seen":"2025-04-19T17:22:25.30881Z","last_seen":"2026-07-03T01:37:56.576057Z","times_seen":54,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240409/1712647226403383.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240409/1712647226403383.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1444617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"98c20aa9d617dc3ccb56f22f6cbfeceb","sha1":"232cf6be1c94a61cfea4f928adfae4a38c32f3aa","sha256":"974aa54d8c1aaa6e877b211a0578fe84f4a1bba20ddfc94915d6a3328151ac72","sha512":"486f696ce68e4b45aef057b811895cbec44e7902df2071fc5948e6c58c48a630633de97826749fe5905d470552f45cc89dcc5928a3c3bc335327f91561bde049","ssdeep":"24576:WXCjC3v55VrnVIVpyPtsoYO6M84+KW7acG/S7rRCDbwMSDe8I:uCG3xzUTuW7aCRIbWi8I","tlshash":"6425334ed1edb23fe0758b4f4b24a0d78920f59b8c72624e4e82d5d8f974c9d9e493a0","first_seen":"2025-08-20T02:11:19.413102Z","last_seen":"2026-06-21T14:42:37.738221Z","times_seen":38,"resource_available":false,"data":null}},"time_used":2351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B1X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B1X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"a3b824271d86cd8c84ae741a33879675","sha1":"c1295998666b540fee1a41938b693f3fdf3da22f","sha256":"4cddbd53637a45885c6ba68aab4984e0237be51b8b22296799983aa58c7cb3c6","sha512":"bd3dee6519de88b7c4de67947784437e8a556424422d9034ba5b11d2580f28589304e72822f9280431d2399b2aeb1ea3e71ac37016f80a9bfee3eb7603299a90","ssdeep":"","tlshash":"f6512a4ff84075c125a9ebd230c58047c916d9a0d6c1a4a56dc7c02f297a3f801aedcb","first_seen":"2025-04-19T17:22:25.383213Z","last_seen":"2026-08-03T22:28:28.200769Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B2X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B2X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"74716bb759652baf41fa6e733996eda0","sha1":"b8bb328d0242d76524cb641ee521fedc0b499517","sha256":"5477fc3327de4b197ec8d24d8bdd39fa532c6891bfa783596531487be26dd396","sha512":"013cbb4f63a21386d393ae2f488f806ebd842a476f0d5910189a0f648a2d6ec848d56581db8ca2bf20d72ee43fc524324b9944edf17a101b035acda71c3678c5","ssdeep":"","tlshash":"4851290ae481389007cfb6f628f8e0a96f108f0295c668f62ccbd51e8fb01ed59095cb","first_seen":"2025-04-19T17:22:25.369091Z","last_seen":"2026-08-03T22:28:28.198386Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A2X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A2X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"a90ee690fd254febe89c9314f2fc39bd","sha1":"085ab23645f51c943bb3c8340346576efcc79519","sha256":"3929225f3c2959a58a3798f2f5b5c34f4852b943bdcedc391f5623a9f1416081","sha512":"c884937cf7374ba13306832d003cc01f4aee24091b18c4242fbe443228b1a7763bac085d19f6a12b8eedf091f7f3b8c24479ae9bd7b6d551c3f8dbaf5b79e06c","ssdeep":"","tlshash":"a031d7c9fe8139419649e98125e642236a21c840e8d2f4b2bdcf943a24b22f559755db","first_seen":"2025-04-19T17:22:25.382297Z","last_seen":"2026-08-03T22:28:28.18737Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761984306377632.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761984306377632.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182054,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2246], baseline, precision 8, 1200x665, components 3","md5":"8e65113042c20970e70e257b8e07582b","sha1":"94d601a83470a256909785614d89a4b70ee9da43","sha256":"399cb43a0b96ec770d3fc039c621668b803d604933591f7f31fc3aa46e98ecf9","sha512":"2be3afbbdf5292eb1779a58ed6f56c5189b86e9271ca44f8594728511003a6807cdf5e2e7775bf237d4f6437ea26910105b58c5f542ab9976a98351a1f076867","ssdeep":"3072:eEfWeg768t6fcZmRgo1hupwZQQdZkzhTgnYMeLLVTy9Bbi/FSkzc1hJ:5WeIGcRqZ6zinY7L5uDbi/skgR","tlshash":"c3041255afaa5c31e1d09971d01be99583004ec9e7c222983fef584cb7358f37daa683","first_seen":"2025-11-04T11:01:15.296744Z","last_seen":"2026-07-03T01:37:56.628232Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/B5.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/B5.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"0c8e8e3c61713acb5607dc54de06aeb4","sha1":"f46eb7f63e5d008d839933103dda473223156a68","sha256":"373c9f55852f0343a5603487353a89f8dbcc4ba59bac64f0025d6cec1ea7b107","sha512":"0a47b7d5e98f8efd9c6561137deae52cfc51787e72552807987116c7d82d1498038532a0ac6689e98a570a4c6a5d8d8e2b49da73b7ab09e69491443553fde5e3","ssdeep":"","tlshash":"de413d78695814801defeb4134f6907b6e954190e1a0d407bccbd83718b18f78a1d1c7","first_seen":"2025-04-19T17:22:25.398782Z","last_seen":"2026-08-03T22:28:28.184968Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260107/1767750529334224.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260107/1767750529334224.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1635 x 253, 8-bit/color RGBA, non-interlaced","md5":"a7fb9ebd3c86558a310d53d39ae89905","sha1":"604550c0486ed4660689d29e7718bd707cb3c2f7","sha256":"a0c3057edb5272a3e8382166fa2829914c440ac965ab020a8073127118c35076","sha512":"fcf7d516d4679ff20294bec8e6a7aaa2779b41af7d73ac88c7a8321c289ff636e6e453d8a8b36bb047834d9376cc702469b5c0ad45719da1f7bd0ae88f7c9d3f","ssdeep":"768:2JnJ5EaAzeqHDHIsSt9fF2GFRrcQEKGhmfdBIf:Un/EjzeqHsj9fYcBcxK5If","tlshash":"6ce2f101c08fe8dafcce78707c99b1f751771b6d6c83860a32b09a17ad614ee194da93","first_seen":"2026-01-13T07:16:23.400341Z","last_seen":"2026-07-03T01:37:56.580591Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761977289286577.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761977289286577.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4320, bps=182, compression=none, PhotometricInterpretation=RGB, orientation=upper-left, width=7000], baseline, precision 8, 1920x770, components 3","md5":"b9b80363d641b2cb5819e253046f8c49","sha1":"7d3355965ffd364a31b86c7ff52489fff03a8a3e","sha256":"25cdd6e2f7bdd67a86ec3208fa3c38fd8096b08bf16795e8283641e78bed8416","sha512":"1e4c5a6840fbc11b5b6c5a25af3d07fba59b2d435e70fd1fc712a8f2b99c30b11940c8a6cf99c6bdd28a06819d485b608cae568aecc367945e303d03e8bd4ae7","ssdeep":"6144:V9al8atww0DcLofput3K5Id1sgFFEAA9YN6z4IQ:idtwff83K5Id6UmAwCt","tlshash":"7d2412246e42ae2adffe0c3763ddd98f04455ec264d31225759c25a7b3b3b2d1b08ba4","first_seen":"2025-11-04T11:01:15.291476Z","last_seen":"2026-06-21T14:42:37.776401Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/css/animate.css","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/css/animate.css HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66752,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (460)","md5":"1561f1da3d758fe853c599c271cf1117","sha1":"c61bd1aaf3deb32cfb55b09aa0eb034646ce3717","sha256":"756daf39a232d6f4ead036a93171a5a319ffca4a720ab28a5e37794b935138b4","sha512":"8a8422e7d8cea12cf0aef6ae2c297dee05252acf55c4a58db305c510e2335105d5985ebc2e8a0689c87f6b6108f117d76d711252d0fdb27eb370fa705f25e7da","ssdeep":"384:dIWpvHfsQGWe4Lkwd+MteJQy+AWX/U1xZp7hcnAr1d3o627lDxeOn4j8W6+PAOFd:FO/kuZqfB4ByAwr+Cns7XXnixHr41eGh","tlshash":"966306999b90118427320d15cfcd5b784a3cb96358769cefb381288f9b55b9c23cb72b","first_seen":"2025-04-19T17:22:25.365239Z","last_seen":"2026-07-03T01:37:56.626072Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/css/media.css","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/css/media.css HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14435,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"790122b273caa56bdc8925ab8b82f030","sha1":"07357ec84f1fa790afd7294cdd86d78a3d3a9aae","sha256":"933df405f4bad03b3745a97dcb34d432a095252af0b216bf4b34bd3747d2ba13","sha512":"a7d98962539c9e2ea51104b65897595f70d9a126cb999154ab43767d2b36e294b9c01a615c5d3297132e9c3a0e39140f81870e680a669c0812ee862f32b96340","ssdeep":"384:MMuRsRBtKpKNnaciN12FvzsY/7IQxc20CKqdRfvdp4:MA0pk5RZisKeRfvdW","tlshash":"1b5200159760310ed42756bbfde37a3533895703f24368e286b02c1ddabe69c14faab4","first_seen":"2025-04-19T17:22:25.360718Z","last_seen":"2026-07-14T23:57:57.188436Z","times_seen":75,"resource_available":false,"data":null}},"time_used":1843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240329/1711695616432443.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240329/1711695616432443.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258719,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x495, components 3","md5":"0eae630e90a70943fbbbc9f61bf1e0c3","sha1":"79f8066b16617cbeddfc20931d1d5128da3e0440","sha256":"f0d6fd887d2b6ec42c7e3dd675fe6b32c1650c90bf465bf4a7843b9ccf737761","sha512":"2312edeed724d0436188816a138aea56d83ebbe6dbc0e719aaabb11f2c1099b8d2eb5637d117ec12a1e9eb2ad69c3d6021327e778bf03989a452483c3da3719e","ssdeep":"6144:2BXw5PHiYKWHMj9JkjaBaWQodTSWmXK7+:Ww5PHLKHfkGB7ea7+","tlshash":"7b44230c5cf6133d66d3940484d29c775d6244eb7bbbb3acb5ed8538aaa985c1e030eb","first_seen":"2025-04-19T17:22:25.344713Z","last_seen":"2026-06-21T14:42:37.792916Z","times_seen":39,"resource_available":false,"data":null}},"time_used":2105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761977532448676.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761977532448676.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2462], baseline, precision 8, 1200x665, components 3","md5":"4070a539c418ace2a45aa0f1d1c011a2","sha1":"ee7492f0d75bb348c022c095707e36a5fe6cb463","sha256":"d5919585e99f50ab5893704ed54463f9ae52c6074ef6c0548f953e99cd3d38a6","sha512":"594dbe41a104cf0466d7b118943f47a3fca442c21d5f0a346d79579e550c5a059fe4692d859fabeb4c68ac3985f12e2b5bf79931455eb82b75213263c255b7bb","ssdeep":"3072:QKZpWuQA8lcNv6zVG1Rso3EdVG8V4Id/HioAonaJYsrFcXvmBCvoeL:QopWuQRD36EdltWIgza/3","tlshash":"3504127133c22f52fbece235e4e8ce7253a9dabc6ee39943b05d29257f281511813249","first_seen":"2025-11-04T11:01:15.252323Z","last_seen":"2026-07-03T01:37:56.629155Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/btn4.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:26.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/btn4.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/public/static/portal/css/style.css\r\nCookie: Hm_tf_zjjhmvlczo3=1776051685; Hm_lvt_zjjhmvlczo3=1776051685; Hm_lpvt_zjjhmvlczo3=1776051685; __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%225e764193-1443-561b-8105-5c0239f2aebb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201776053485348%2C%20%22ct%22%3A%201776051685348%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=e6d55e04-c6c7-5abe-b860-0ad2534ea37e; __51vuft__Ki3Am2Z8sqj2SDaC=1776051685353\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:27 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 14, 8-bit/color RGBA, non-interlaced","md5":"1d7314c4da0b86415da8a9b80798fcfb","sha1":"73f129a2761251076d5baf6aab40b8c54381bc1c","sha256":"137c55be62d0d5cf451e4f36282bf95055f68d830896dcece9ba87f9734408b4","sha512":"33dd1d386792502c13d81b43aab6ea7c64dd43f5bbba5421cd98aa21541f7685b7b57891baad6a2afa9be7c54bf47a048ee1c52a0b31fdd3a19722e1575f5084","ssdeep":"","tlshash":"3521981afe103d80a69cf78336fe50779753854099c0e0e4bccfc01679201be888a5cb","first_seen":"2025-04-19T17:22:25.343471Z","last_seen":"2026-06-03T23:27:16.140352Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/favicon.ico","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:30.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nCookie: Hm_tf_zjjhmvlczo3=1776051685; Hm_lvt_zjjhmvlczo3=1776051685; Hm_lpvt_zjjhmvlczo3=1776051685; __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%225e764193-1443-561b-8105-5c0239f2aebb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201776053485348%2C%20%22ct%22%3A%201776051685348%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=e6d55e04-c6c7-5abe-b860-0ad2534ea37e; __51vuft__Ki3Am2Z8sqj2SDaC=1776051685353\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:31 GMT\r\ncontent-type: image/x-icon\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1485,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"90f04047b9cbb4d0e27a49f380de7f5f","sha1":"129bc2912ce187163712417eedc671b022f2978f","sha256":"2c4499ebc870afa736608ae1d6581e8f96a05ce14377549c8514593f09b82985","sha512":"d691bd60976775b859e432b60b3ab5fbc66951e8ef77a49a34e40e027db8a2c36630cf60c5ebb0f8b54f109cacc199a62e1916c1f5b37f75471c795bc6ddd4ce","ssdeep":"","tlshash":"bc31e9b6d71c6a06a4b78675a9854cb1e6b6060f450bd8cd05d3da749186041cb917b2","first_seen":"2025-04-19T17:22:25.379493Z","last_seen":"2026-08-03T22:28:28.190934Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761977356604344.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761977356604344.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2567], baseline, precision 8, 1200x665, components 3","md5":"40201a8d6c2c899de1ff37315f92b284","sha1":"d45f83bea93962e9e2f2d5f90e90ee3054cf5ec4","sha256":"38823fc2c400dfb1d342dc8d2a7ee13245490d35bc7166485c6b92ca98503d58","sha512":"14778e567c1f0afced2b0f3b4ef7264ee6ec49f0866f8c756db3ab26813e05c2bde940f1e1b86f610789f8d4aaea09362d9665df5da6e1c2096f16729974e0b9","ssdeep":"3072:1J9vfG0LdBcFfS9hNmJTmb1b7EHuZ4VaaQj738FkBpbANZ7VIg:lG0LdBHSgdYO6k38FkbANVx","tlshash":"e7d3024d4ba09ed6fc4a2e7e54d9d60b537638742397165c3ece2806b7383b65e90383","first_seen":"2025-11-04T11:01:15.244534Z","last_seen":"2026-07-03T01:37:56.578505Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761984354531057.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761984354531057.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":215939,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, height=1905, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=3500], baseline, precision 8, 1200x665, components 3","md5":"dd2c74bc16cc21bf7b43f5bcb3c32ff6","sha1":"21fbad54e666b70118386a0d31e3227e54ca1240","sha256":"aeff2b51bd4d9b86ae058ff60a0573710a9463997962c00d78c1d20657c4ecd3","sha512":"2d30cee30bc1151e5016debe472a450d851bda0b14ed9d3e2bc0a4e980b7ea673c38c2107b11f28d27002d39c7c801bafe253e623adcf29b7e406f5d9f632aca","ssdeep":"6144:CPoS2tN18gCnDDg1gibtPf6qaypXPUxuGiNvYD:J7N8sgg9Svy5C9iZ8","tlshash":"2b2413576be28992fa9d0234685c4d47c785e0263ba722f2f8cf2376cf753168c85786","first_seen":"2025-11-04T11:01:15.233241Z","last_seen":"2026-07-03T01:37:56.59125Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/push.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:32:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6778d5f4-58a\"\r\nexpires: Mon, 13 Apr 2026 15:41:24 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (380)","md5":"ad532b192efe82c126bcae5d448ad494","sha1":"1d6ef90026626b798c09f559d982b30fc3821bcb","sha256":"4d50d0fa188e4c86813ca1cf404c1d69d47d46eb219fcb13a1ea344b90eee8d0","sha512":"8575586ca242a184da4d52be01dda61555cd6bfe974e12900df35f6ae36329e57d78ce59ee3c7553f1509c9b072318d7bddb204b4c699fe7213496b1c6b4d4ac","ssdeep":"","tlshash":"97211dce946202bc16a310681abf38dcf2a9063bdc54e541f86ad0410fb4a3703a7ed0","first_seen":"2025-02-06T06:30:26.389581Z","last_seen":"2026-08-07T22:14:31.827768Z","times_seen":720,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20260323/1774250193957430.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20260323/1774250193957430.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1094448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 665, 8-bit/color RGBA, non-interlaced","md5":"1354acd4c54f2c1da88a3b32e6697284","sha1":"ce1f5617d4d64747fb161bdadf6fa9ab74b6fced","sha256":"95b95655d662480b5ca979c81ee56e617f136552ce1106ed3b261709976ff02d","sha512":"be2a3373153ee6841c401393f1acd7eee5fcbd9aa16be3cc5030c4ae1fa76190db873ec863d28128602a1d886837820766c9d8cb86781b4afbd1e8a984d3fbe0","ssdeep":"24576:RchLhraNvdQI0wVd/o4cYTCdvH6JDtMtP55/txiYBvgB76rN7XL:Rch1abQ8CwTCFHiDsT/txXE769","tlshash":"b72523f5f4e722f936df042d11b7b13489c46865237a3206752ba0f9d6de98072ecb4a","first_seen":"2026-04-02T10:13:29.136229Z","last_seen":"2026-06-03T23:27:16.126261Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A1.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A1.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c75198deba2c58d8a2d1d7abb9abbad7","sha1":"4d40f3127494802cf8eddd63f3cf8dae3ee5d821","sha256":"3b8af51ff8cf98e504e3cf85fd028ddcf5400c3334c79c0f2eb1874748ad29e8","sha512":"b81c2f13992dc3d1acc72b9b15a460cf8827b506a43b5d7a39c6795a69522477f90806bb6f5c6ad7b884cca399d536b9ad464f849d5e66320250fd1ce96ac34d","ssdeep":"","tlshash":"2031fa1bf6503c42a61fea4130e9853bcb26c980da81f0156cdb941606f10f93bb7cdb","first_seen":"2025-04-19T17:22:25.310623Z","last_seen":"2026-08-03T22:28:28.188448Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/main.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/main.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"840afe3af2dfe803075bb29a9a70a557","sha1":"c501b22db15a9b54696580e873b2e7b671f63e72","sha256":"9ad77c0782470f528b036e2113e34fc8e2bd26c853298626c19085b607eeb729","sha512":"9c53f60e81512cf6f915f80c6d3be2cdba1cf74c25fa739bb1ef208dbfe64469230fbef4f22115eceedd3267401d3b7200c377b3703e0fcbf47ef9821cce5adc","ssdeep":"","tlshash":"0b51df0df1aaa66010b7707b4f7f60842e261907b60dc040fd7cb5e02f9026d6a63eae","first_seen":"2025-04-19T17:22:25.315361Z","last_seen":"2026-08-03T22:28:28.201423Z","times_seen":64,"resource_available":true,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/jquery.aniview.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/jquery.aniview.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"884e9f63a4f285a1a8d9be7629158b4a","sha1":"085a9b73b6808ab5cb6b2b8c6bf0f9ed9801ccb6","sha256":"2ea6063567cb3e4692bd96d029eae03998065febaecccfd9cb9b46c4dc9e1128","sha512":"39c81911e2e858001871c3941143ceedef4c3a26ad0f7755cedafa64ffacca6895f01dfe6d35caaf1e7d552f6b979844810d04e3667587633c13976d154cdfad","ssdeep":"","tlshash":"8a71014a75a21138a0af397f039f518c2bab91271209db203c4e5b589ff0f74b7956ed","first_seen":"2025-04-19T17:22:25.314619Z","last_seen":"2026-08-03T22:28:28.191653Z","times_seen":71,"resource_available":true,"data":null}},"time_used":2105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761977313994075.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761977313994075.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4320, bps=182, compression=none, PhotometricInterpretation=RGB, orientation=upper-left, width=7000], baseline, precision 8, 750x495, components 3","md5":"7433b55fa396dc6bfeb030371423ca11","sha1":"5d7bf20aad5ed104785446052ccbc07fab1bafaf","sha256":"40b7b574dc22eda2e212375f8437225e879d8fdb39b9bf43d37464f690397dda","sha512":"8ca9bd24bdee374382ad57afd6429056a9b275cb52580c01e2aba82d3a4a6c983a0009b7b196f4d75565acc57ee3ddef5178cb2f44e707752541af73a0a0e6d3","ssdeep":"6144:XxQBD70MmY51FpR3op27YP/G7ETNiB5hqc7BQ3VO243:XxmhNpR3J70ieUXUF3VK3","tlshash":"733413289ce30c74d4cd6d34c726ba1aae0197e862678d503d0c4f1b37a2bfd6a3d496","first_seen":"2025-11-04T11:01:15.318307Z","last_seen":"2026-06-21T14:42:37.767355Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761978198351348.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761978198351348.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, height=1280, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2560], baseline, precision 8, 1200x665, components 3","md5":"4ae520a8be13f7217ffc9b6db8a05dac","sha1":"c0febc2e34281eb93e87c193061ddc2ee9ec795b","sha256":"f0abd0094a80b7beabe6ed64109ff971e451bfebe5df9d01e24c4fbaa7e2a759","sha512":"afdbf1b882ac2b2a8008b885a9ddd1d1c3129591b10123ab15551ff16cbebe1bb017ffb5473be8077d2c1059faa96536a062bf38e6b99c482547529f068402bc","ssdeep":"3072:yPnpmXLZOVYsouy11bMxU5eiQeSf4HuCEZAQrgJVohY:InpmX0VYPuo1bGUDS4tEZA9JSO","tlshash":"ccd3f194aa994ca1eeefa6f64cc6c443c51258245ed3bc2e7c4f7c62f352f284b46346","first_seen":"2025-11-04T11:01:15.228152Z","last_seen":"2026-07-03T01:37:56.609871Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2858,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/js/distpicker.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/js/distpicker.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (738), with CRLF line terminators","md5":"cfcea3d36476e39fb29992a838095d3a","sha1":"3b309065cf7b9d438f141177959d11bcd5acca62","sha256":"8dfa54817ad296f180e08c13688dd7b9ff1a62f7cefee9143f89b2cdb4dd90d0","sha512":"a00cbfec5778e8d38a6ad42057a18455ff8fe481d9dfec8c4615bb49cae4ab4b7a7e6361c2630c66987a52bf79c85c85ed1887889039121d12262c324aab262a","ssdeep":"48:6SxJMe3fldTL6eNKBMCyxJWu3hzYArgFX/zdhkYhtLPPzm8+oRN/LbMArgFMhqSq:6SkkdTueN5xJWu3xY3t/Zh/poHExYYcp","tlshash":"6691511ab290652702eb94e2205f550aa43fb09d4009566cf9fed7f65fbc80af27723d","first_seen":"2025-04-19T17:22:25.364165Z","last_seen":"2026-08-03T22:28:28.192472Z","times_seen":60,"resource_available":true,"data":null}},"time_used":3108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251029/1761707153441439.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251029/1761707153441439.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2025:10:29 10:30:53], baseline, precision 8, 1920x770, components 3","md5":"4e5c9d1efba736e14d7001ff6f64f336","sha1":"37a564df8a2b1ad22bdc7643b3ceb1f29fc4d211","sha256":"769a650d9cbe4e8ec4e962db3bbf489ddd630513d69bce2754a1e1225d3cde36","sha512":"bc7357cc7fe2fbee7674f37ef793500c0e12dbe5b920b024783438ad6475558894689730d3768d567627a97cb447c35d106ec1664edb440e6e5877aeede0791c","ssdeep":"6144:7F0hBhF5f4wkQYLIMTdaeQfAjGtIhEuQ4N7b6WlwUaNxq1AuqZTlf/QgUqPVL:abfFJYLIMZaVfAaSS65KNweueTF/Qi","tlshash":"e17423256a505c22d8e5f33888ee56c0d7b31dc41f526b2ebb9e0e153bb81b48dc919b","first_seen":"2025-11-04T11:01:15.257097Z","last_seen":"2026-07-03T01:37:56.571489Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A1X.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A1X.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"13f2a7275df800683616b57eee1c30cb","sha1":"6b0aaa7543f6cd24a007b6f9cf6452ed25766e5a","sha256":"e85a0966c7981d1976751bc49e92f54910624818309b2551090d4e7754c3a320","sha512":"dad87948dfc1bb431592d3bb201537620a96a4d13328240831cbeacecdc466892f2e64397af118699809dd739e75b39f36b698cb35764e7e2a92418fa7c04008","ssdeep":"","tlshash":"54312816ec0079c5a9d9dac331d3203b8b534d0042e140a3be8ee82395e63b61a454cb","first_seen":"2025-04-19T17:22:25.381335Z","last_seen":"2026-08-03T22:28:28.192992Z","times_seen":63,"resource_available":false,"data":null}},"time_used":2103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20240418/1713411214952704.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20240418/1713411214952704.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178957,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x665, components 3","md5":"4fc784aeec92d82a083510d66b61ceba","sha1":"7e164544977fd85ca6e6d0d6e7635674abc3c436","sha256":"84bd76aa225c8386d928b6c1fd0978419dab4edd6c2d3fd52a11c75b3cfbafdf","sha512":"0dd55946e492e7cf4c5eedaa1b01f4d7e129bb63986da14fc9ddc6adad17c33be3c8249dd5cd2a4c4f3cb8f1a7da5e838ff0650054388959758d793369256edd","ssdeep":"3072:3WlMk6N7qZ6V7So/91C05L6OihSSYFXJtx5rtg3bUMyRe6MavkSFDqC8o:3WloUZ8So/9115WOtXzDAyReckScjo","tlshash":"0704126b1a4c6d0f61e037dc4ab59a2706b56cb09c1e208033fb2dd799a35f5f2a0dc6","first_seen":"2025-04-19T17:22:25.354558Z","last_seen":"2026-07-03T01:37:56.6122Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20251101/1761984334951778.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20251101/1761984334951778.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202975,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, height=1969, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=3500], baseline, precision 8, 1200x665, components 3","md5":"87bc932502ff40223777a6b1fbd797be","sha1":"a31e4fd5f39aee4ef07183fd9df21ece62590bdd","sha256":"f147d1da9b5a1150251e44526ee8255d6dc9ca136bc192859f98e2f8d6200381","sha512":"346c00554de1423b184f16245e013e5004c9463ca1a37ed602f31d2985cf9fbd08705778ed8faf81ea0b7b3dedc9a1423fed1816be7ea73bc4e2a993bd17a4e3","ssdeep":"3072:2zxHHVshwt1/3/vh/VuPw+TfmCnZKutt8pr+hV55JVDbP+6Ggp0S14LIWC1G56JX:EgW1Pnh9B+SCFgiP5JV3P+UVHT/6y","tlshash":"ef14127363244df6eda1d27f8664860292359c68bb833d1030cdad5a77773c7ae86312","first_seen":"2025-11-04T11:01:15.320498Z","last_seen":"2026-07-03T01:37:56.582844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/uploadfile/images/20241024/1729757131704071.jpg","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /uploadfile/images/20241024/1729757131704071.jpg HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:26 GMT\r\ncache-control: no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249675,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2024:10:24 16:12:35], baseline, precision 8, 1200x665, components 3","md5":"1e9eb7157e60631362316d8e55987ba3","sha1":"cdc705d9704835b321379bcc6ba1aac500a495bf","sha256":"dd35a6284af869dc9b29e21224e80b72a5e9d218185b3a90df54fcc07651c1ef","sha512":"de7fa311330f962d0289861a4dba0406895c3e2ff0a08599b888559944098f1b745d736269631fd87eccf477fb7b326651885f9e72974d8242402b66d6a0839f","ssdeep":"6144:h/JygFrJXS/RMtwCrHrwzo5oMwzXhkVTAnSXTgIO+eCn:r11JC/RMtwwrFoBzX2VqSjgI2Cn","tlshash":"0b34223512079ea0e0ba5b7162eaf6e206924ee443e7518439cc39597f13372eced46f","first_seen":"2025-04-19T17:22:25.391446Z","last_seen":"2026-07-03T01:37:56.599118Z","times_seen":53,"resource_available":false,"data":null}},"time_used":2856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2856,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/common.js","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /common.js HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Apr 2026 09:09:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d61b51-958\"\r\nexpires: Mon, 13 Apr 2026 15:41:24 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"b93f2350334d7f4727b71b1f0acac2a6","sha1":"57efc586b3009b74ba01d1656e4d6952cf63a659","sha256":"7209061e11c1579895afd2a1fadd88ac97b6341317decf79aaec7966e187372f","sha512":"cc075cfb1f9fca0b585b27d4b9a903bc6a229d2b4f4cdd0aa96b44738402c536fb76f8191ae79f5aa88434a3bbec7df4812aeb8a5cb384d41f148156155c5a7e","ssdeep":"","tlshash":"b841a71e4d8662789213213552faca0cb6bbc00b5706ca0474adf4568f58fe54c2bfe8","first_seen":"2026-04-13T00:19:14.245774Z","last_seen":"2026-04-19T19:01:02.843965Z","times_seen":4,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/btn3.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:26.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/btn3.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/public/static/portal/css/style.css\r\nCookie: Hm_tf_zjjhmvlczo3=1776051685; Hm_lvt_zjjhmvlczo3=1776051685; Hm_lpvt_zjjhmvlczo3=1776051685; __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%225e764193-1443-561b-8105-5c0239f2aebb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201776053485348%2C%20%22ct%22%3A%201776051685348%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=e6d55e04-c6c7-5abe-b860-0ad2534ea37e; __51vuft__Ki3Am2Z8sqj2SDaC=1776051685353\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:27 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 14, 8-bit/color RGBA, non-interlaced","md5":"354268c65c9fa511ef19a8f055a7d6e6","sha1":"3b934fd8a53bb546260fd60f73778932bdef74e1","sha256":"49d218acc4e5cece45698056a9adac6de1ea2642346a22ca13a3e5dfa40eaf99","sha512":"9cdaf2ab38fcb55e89ed94145abf4ade4346a76d8cb3adff113e2bad9e8cb005646105e83c673da6ca21f4e3436d2c4e5bd1e9b4a11d65092325d8aa8d36b3f4","ssdeep":"","tlshash":"c821775afe107d80abecf6c630f5b06799674ed055a0f07175cec00719612b5c92d5cb","first_seen":"2025-04-19T17:22:25.38416Z","last_seen":"2026-06-03T23:27:16.134317Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/css/style.css","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/css/style.css HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51367,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"troff or preprocessor input, Unicode text, UTF-8 text","md5":"1e1fc844158eb012f6004bff78ecb060","sha1":"ae9ba7044282d6573c17cd1c20dca1506146666b","sha256":"f268ff79a12972e757d9c333e35b8102546956dc88bbc0af3380d1ed74f4fcf4","sha512":"8b338c26379bd5954106b20ecfc161b8656a548e63c9ff4c2cb171892e6e0df89fb25010aa5a826d5d0a7334f8040b7cbe67f7b581a1ef36b927bba64021b1b8","ssdeep":"1536:RACDCnYXNMyD11u5s/rEzmYL3i8lOknyt+DtUbE:3+YXGU11u5lzfr5lOknyt+Dt0E","tlshash":"263384236b142845b217d1f9bfa66b98170d8012fe4f6eba76167c3cc7c82d4427b789","first_seen":"2026-04-13T00:19:14.281299Z","last_seen":"2026-04-13T03:42:00.953979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bbkchn.com/public/static/portal/images/A2.png","fqdn":"www.bbkchn.com","domain":"bbkchn.com","tld":"com"},"ip":{"addr":"156.250.4.242","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bbkchn.com/","date":"2026-04-13T03:41:24.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bbkchn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Apr 2026 17:16:03 GMT","end":"Mon, 06 Jul 2026 17:16:02 GMT"},"fingerprint":{"sha1":"B4:47:0A:22:7A:A9:A6:43:61:D9:3D:3C:16:41:8E:34:94:F6:FC:2E","sha256":"FD:9B:2A:5A:16:AC:B6:B3:55:A0:CA:33:7E:2F:7D:CF:64:4D:62:DA:00:33:86:7B:D5:6B:FF:6A:84:FF:FD:4D"}}},"request":{"raw":"GET /public/static/portal/images/A2.png HTTP/1.1\r\nHost: www.bbkchn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bbkchn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 13 Apr 2026 03:41:25 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ncache-control: no-transform\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c2fe05b879e3279a9700f2cba2987f17","sha1":"2c9721952e5f72f01d3362212e42863d28630703","sha256":"c245579fb422cc9a2397ace8e371ae6f05e155616360087eb7b83430d2973fe2","sha512":"47d412fe35e120cc8eaf2c9c59f354f6dd656f6d3c8eaa67d9a3d275add579ad9ea4642ff2a5a16980f25f30d55e7d9c5ed4b0ea544dbe6a6bb324ca3ed90084","ssdeep":"","tlshash":"d331c84cfb506ac1655dda8229e178376e724a80d284d091fdcfc42f2c700b585641e7","first_seen":"2025-04-19T17:22:25.316083Z","last_seen":"2026-08-03T22:28:28.203712Z","times_seen":64,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"www.bbkchn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-13","alert":"Phishing Block","trigger":"www.bbkchn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}