{"report_id":"8553aba5-6905-4705-b811-c9c3b369f1ed","version":0,"status":"done","tags":[],"date":"2026-07-07T13:42:44Z","url":{"schema":"http","addr":"www.tiketok.cc/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"www.tiketok.cc/h5/#/pages/login/index","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"title":"tiketok.cc/h5/#/","dom":{"size":152302,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40058)","md5":"223db025f20b5f2825dd6a5de0171744","sha1":"9b23c243e108642ee816cdea6d42f27e62336cdb","sha256":"9e559734982fea193c3dd9e64033f2066d9edb7f03455bc5f3ff3da66b63b14f","sha512":"77da00f357677952f3ea2941a8799063c9eaacd8ea75f3d4bd53ac23ff991cc0afee791cded39d400316106202fd3f14d2e958003095faab62c7ca6b027c9f53","ssdeep":"3072:5sp0NVr7fnaM/51fuPlIHGvXNWPf1f4yH9sUnbauJ9BxEuMa8Qc1tblK1mklU5Q4:xrr7fnFCvpNISV5RN","tlshash":"07e385b2b68c244caa2bcd85d199b3bdbe6f6963c3429dc7e71137358f816c3221161d","dom_hash":"domhash7f8c5110708afc19e669df96fca1af86","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.tiketok.cc/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T13:42:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.tiketok.cc","ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":1450192,"sent_data":15355,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-03T16:24:45.006254Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tiketok.cc","ip":{"addr":"52.184.98.194","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-07T12:19:30.300782Z","last_seen":"2026-07-07T12:19:30.300782Z","alert_count":2,"request_count":2,"received_data":878,"sent_data":1138,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/chunk-vendors.0f23927c.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd3a84055652c9509b8d7b82cdc83031","sha1":"aab1ece921c4e5e4a2ead5835e7cef9038dc5458","sha256":"0716dfeb1737a027ebf3b8883d2d5d217c426920132f8f78359c410d3cc9b761","sha512":"96416ee9c05ae311191d208062af8f22074eaea0bf2942c3cc757f6a401ba6af37fd54ad2c5c88e1a31a507cb8be7b2b46941c0a0df81b9e076171378bf8fc87","ssdeep":"6144:OAP2Tfuc3bgxNcK1Zcn+1BEvmErZuWheKkvzzqSu++VSsoLhexeZyr6d5uoTTA:OE2TWPNc8ZcMKZ6vzzD+oLUeZeo5BTTA","tlshash":"1505088df286b0b60be760b5403f220bb2376959b40a84d4f675e4d4ad7894e2237f7d","size":809814,"data":"","first_seen":"2025-07-28T17:12:21.85524Z","last_seen":"2026-07-07T13:42:50.545605Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/index.00fa1b63.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4151c3bc9378e5d84ff4ddab9f7c9496","sha1":"377de3d7c420f10c1da73ac0543f70bcf7f49fc9","sha256":"46f345cb5151a2cd254f94c000d3647c643338aef615d92cae275b4ae1b2a170","sha512":"7d8bdf8878ec442d12a2f47d19f9e96eae728ad61a68c7b8e961492fd99f4b72232b21268cd95184143a05991799ef9561e6ceca515438c1f20e75bd7c96c886","ssdeep":"6144:zo+4OkTJfzGDi7CjYHkhXRDusruqGMt1Tc:zRwxzGDi7Cj6khhDusruqGMt1Tc","tlshash":"b6643c82b2d5147f4b864b81e06f3ffcf6bb08b24245e493d5d07f791ace986511aa2c","size":321851,"data":"","first_seen":"2026-07-04T06:37:36.076387Z","last_seen":"2026-07-07T13:42:50.537869Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-account-bills~pages-account-deposit~pages-account-fund-records~pages-account-index~pages-accou~f5737e85.a498f232.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b30752300fadd40bca7e2c8abab0ef3","sha1":"55c48c3b589862e4878f031eeddca1967f61b168","sha256":"4515ab8d711fe04186c013ce241d943acd76ddb6738febd3ef835b0487536744","sha512":"9156a97cad885488aba282aa3c6dccb96f83ea1cb710f2b5e0de777fc8014e9d50ae0eab6961702cd73c75fcba618aa18a0756cc15c39e77e0028994ba2332f0","ssdeep":"1536:mFhzsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmt:mDsp0NVr7fnaMj51hwJX2RcJZHYpN7xE","tlshash":"a943ebe6e10c1cd13f7bcc8f6244235f6549ff62d9968cc8f126564c8ce27a121a9b7a","size":56326,"data":"","first_seen":"2026-07-07T13:42:41.482588Z","last_seen":"2026-07-07T13:42:50.539422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-account-index~pages-home-index~pages-login-index~pages-login-register~pages-records-index~page~f0d0a59f.30945857.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6747c32eda4b1fe2110d53584ee3bfe9","sha1":"e0a270c81e4a6dae1337e39bef92a63f8b2f7e55","sha256":"fc6eff3d1555791bacea2bbbe62661e4d0a53c22b666d63c58f0554c20672c76","sha512":"7f5225cff664d86d996de38d3757efa73c5827e16665391bcb08ce2e02014a1cc43cfe03181a1fb31c9416f87f40c5cd41c7c08e6a5458abfbeea9ea229db3cd","ssdeep":"192:pwYlSY++VcvVk+8ym/BqRs+QVO4qRs5Pjzdejrt46Pa+0eollaKq13:ppl8MSkJym/gTQERqdejrt46KaKe","tlshash":"ba42f814f1cfb8a509e34014216b1b0d513a3f6d9878a8c5fbe5a9f749e5a8c129fb38","size":12865,"data":"","first_seen":"2026-01-21T01:17:46.924978Z","last_seen":"2026-07-07T13:42:50.563843Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-home-index.0e606d83.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"01c3e0f163b937fb45bab2b8f830ec94","sha1":"509f3077612c2d23a4e10e920016b2c7f058285e","sha256":"3141b6c0feaaff2a18aaa51627ef1913f3cd27aebab7c09be5dfaba5bc0dd7ad","sha512":"6752c67d2e6d5050eed7f4d92572ea6da101d494b085f3630994b7c7711e70c86e18a6db3e2bed8c7b56158617bc114c741944970c22a40c03d4bfd26297acd4","ssdeep":"192:gqecyRbpqYnfKFMlfZphHjJcbXXNqRsS0YNTBDMOpPFD40Jn:gqe3PnpVu8XVNTBjtkU","tlshash":"0282d620f54bf0ae481fc621717f0814d6702f71e234e699e7b1eea64ed99cb272265c","size":19035,"data":"","first_seen":"2026-07-04T06:37:36.073663Z","last_seen":"2026-07-07T13:42:50.561686Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-login-index.21be888a.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d1f09e89f2f3ec4d1c3d1a41789c5fc","sha1":"59dd792b525e5b05c41c2a70cfeff0f7bba80a85","sha256":"0ec276c20567b86f89e83097e08bac73d0692fb3615fd29af23e4c2891fc55c1","sha512":"64469c14f2484000068d5ee35aba7ab3a886fec6aff16ec2767c7ce76f27fa5907afb1b9048b16efbaffd7fb55e8af20f6931383ad4cfd8dc0d43699a77187f3","ssdeep":"768:6Hbtiav8okUQIXuovo7IBR3cW/L/x7TwW:6HbtDv85UQIXuVIBV7jVTwW","tlshash":"79032a30b0cab85e46578438209b550a6c316f7ba502fe96a7f1b5614ef9f4e1322f7c","size":37930,"data":"","first_seen":"2026-07-04T06:37:36.093818Z","last_seen":"2026-07-07T13:42:50.557439Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-07-17T17:38:00.32932Z","times_seen":4449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"App Launch","filename":"http://www.tiketok.cc/h5/static/js/index.00fa1b63.js","line_number":1,"column_number":30189},{"level":"log","text":"App Show","filename":"http://www.tiketok.cc/h5/static/js/index.00fa1b63.js","line_number":1,"column_number":30368}]},"http":[{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tiktok-logo.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.276Z","timestamp":1783431745276,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tiktok-logo.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-96d\"\r\nExpires: Thu, 06 Aug 2026 08:22:06 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2413,"size_decoded":2535,"mime_type":"image/png","magic":"PNG image data, 100 x 30, 8-bit/color RGBA, non-interlaced","md5":"2737c4350fd4c5f413145eadf42d0a60","sha1":"af64739c8f72c1f64e41189c8a29964173aefa1a","sha256":"373121310f46476b851134e628102657b6cc294d5a8461b9219f88ddda35ac94","sha512":"4108e827c838cfed70d6168f02ea9f73766ede98b087552dcb721e562d0f35c2fdfc1505ef111c23c440446cb2238b367b27a06bd08c33967d73b4a8e5e7ec8c","ssdeep":"","tlshash":"0c412a84dd471d815248da6a24f2d017493b46814ad4e39ceacbd5ab24708b7402d8cb","first_seen":"2026-01-21T01:17:46.938287Z","last_seen":"2026-07-07T13:42:50.53624Z","times_seen":46,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tabbar/start.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.018Z","timestamp":1783431745018,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tabbar/start.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-531\"\r\nExpires: Thu, 06 Aug 2026 08:06:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1329,"size_decoded":1738,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2d982a82d3f591699fdaed7185f8aaee","sha1":"018bb32582150990b5be2b0922db49b8d8e772d7","sha256":"be88964d7a0b6e84539afe4b9d2d337231d5486d621d915b6062571720c4622a","sha512":"670c3ad2dbf15e3d900268e871e8ece5e4a4b3085db844c5947deb43cdee885f5d093186a3f53bfd81c89f7649c1723ede21fc91637269dcbee41894eb748940","ssdeep":"","tlshash":"2921c81bb3c88d2a3586b162a8230a7a48141721bf26170ddb124fd4c627509a4db4f7","first_seen":"2025-08-11T17:15:18.611047Z","last_seen":"2026-07-07T13:42:50.536997Z","times_seen":63,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":202,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/index.00fa1b63.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:23.516Z","timestamp":1783431743516,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/index.00fa1b63.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-4e93b\"\r\nExpires: Tue, 07 Jul 2026 20:06:36 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321851,"size_decoded":85772,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64497), with no line terminators","md5":"4151c3bc9378e5d84ff4ddab9f7c9496","sha1":"377de3d7c420f10c1da73ac0543f70bcf7f49fc9","sha256":"46f345cb5151a2cd254f94c000d3647c643338aef615d92cae275b4ae1b2a170","sha512":"7d8bdf8878ec442d12a2f47d19f9e96eae728ad61a68c7b8e961492fd99f4b72232b21268cd95184143a05991799ef9561e6ceca515438c1f20e75bd7c96c886","ssdeep":"6144:zo+4OkTJfzGDi7CjYHkhXRDusruqGMt1Tc:zRwxzGDi7Cj6khhDusruqGMt1Tc","tlshash":"b6643c82b2d5147f4b864b81e06f3ffcf6bb08b24245e493d5d07f791ace986511aa2c","first_seen":"2026-07-04T06:37:36.076387Z","last_seen":"2026-07-07T13:42:50.537869Z","times_seen":4,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":202,"send":0,"wait":204,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-account-bills~pages-account-deposit~pages-account-fund-records~pages-account-index~pages-accou~f5737e85.a498f232.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:24.981Z","timestamp":1783431744981,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/pages-account-bills~pages-account-deposit~pages-account-fund-records~pages-account-index~pages-accou~f5737e85.a498f232.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-dc06\"\r\nExpires: Tue, 07 Jul 2026 20:06:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56326,"size_decoded":32321,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55746), with no line terminators","md5":"1b30752300fadd40bca7e2c8abab0ef3","sha1":"55c48c3b589862e4878f031eeddca1967f61b168","sha256":"4515ab8d711fe04186c013ce241d943acd76ddb6738febd3ef835b0487536744","sha512":"9156a97cad885488aba282aa3c6dccb96f83ea1cb710f2b5e0de777fc8014e9d50ae0eab6961702cd73c75fcba618aa18a0756cc15c39e77e0028994ba2332f0","ssdeep":"1536:mFhzsYId0FHoMqu7NdEAaM2Ol51hwJX2RcJZHYpN7xCIx/+eJF4cL3nnisGQaOmt:mDsp0NVr7fnaMj51hwJX2RcJZHYpN7xE","tlshash":"a943ebe6e10c1cd13f7bcc8f6244235f6549ff62d9968cc8f126564c8ce27a121a9b7a","first_seen":"2026-07-07T13:42:41.482588Z","last_seen":"2026-07-07T13:42:50.539422Z","times_seen":2,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/icon_box_4.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.285Z","timestamp":1783431745285,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/icon_box_4.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-d14\"\r\nExpires: Thu, 06 Aug 2026 09:07:00 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3348,"size_decoded":3730,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"e5618045243b8fbb796589911deeb9dc","sha1":"751680b6488cb9b804721fee0e2492d1af3b05ab","sha256":"a8fef6e8fcbddd163928d82c0e34691964176f185da2dbf303f55d4d04d7a553","sha512":"a045f53472f124741386d773530810e4a6b0f408e87162ecb3b4a0ddb9114d8d234329e914a072968d7f5b74bbb9b0249cdb74fc035612b2015ea464f1a2eba8","ssdeep":"","tlshash":"11615ce30c23c152e9940db61d303988b5fd1ca95015352629152da66e7fe447eeea0f","first_seen":"2024-11-19T07:54:21.363854Z","last_seen":"2026-07-10T09:25:29.679552Z","times_seen":630,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:26.957Z","timestamp":1783431746957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 13:42:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Tue, 07 Jul 2026 15:42:28 GMT\r\ncache-control: max-age=7200\r\nset-cookie: __uni__uid=rBEQUmpNAkSrPe0uA4+4Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":576,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-17T17:38:00.323119Z","times_seen":17234,"resource_available":false,"data":null}},"time_used":1607,"timings":{"blocked":0,"dns":5,"connect":197,"send":0,"wait":393,"receive":0,"ssl":1012},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/icon_box_2.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.282Z","timestamp":1783431745282,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/icon_box_2.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-124f\"\r\nExpires: Thu, 06 Aug 2026 08:22:06 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4687,"size_decoded":5075,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"3cfe19ee2948dc3d801afc4b6c25339f","sha1":"1e908d24b3bb21908191a504c74ee0be3e3a4d2c","sha256":"e71399ca790a567d6f46af5c957a8a4fbd3631a19f9d7c527cc82e57a4048cfe","sha512":"5632e7dff15dfc0b4f46526316d8ae3c432186f1d93c09ca3705c119eee3403fff465bd928c4858de2c8df0ab25588ba8072ca07f91b54b7d5c373292676d2b3","ssdeep":"96:BGTOMOPApcEyL+sCKjU1gjfe/2dYwZveG9evGEHK1:wT2YpcVdbc2dYwZveKetq1","tlshash":"aba18ef8b661c7fdb42d39b13a922c4bf51914c709e88f0eda4e4d5c908bd08d537682","first_seen":"2024-08-19T16:11:10.100895Z","last_seen":"2026-07-10T09:25:29.678623Z","times_seen":642,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/kraken.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.293Z","timestamp":1783431745293,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/kraken.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-78b\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1931,"size_decoded":1193,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3df58a377ae3fa605f59e369b69fe3a","sha1":"20450780ec312fc285b7af814b005e12b61f6015","sha256":"5330f1b2142171e4a3e922a9449081c51ea3ee1344a151a035d57b12ad3bab0d","sha512":"076e17d502a920ac9b40434279972429d792081245fe99c5225d68dfaebb73c23d9718f9baa7cf689d58515b073bb2eec42369237468537d0b051787200293ec","ssdeep":"","tlshash":"d741e23c9300c3b5aca6c9fddf3780e0948c6995d0f9c3568369e52166e24c5fa0d86d","first_seen":"2025-07-12T22:52:46.290711Z","last_seen":"2026-07-07T13:42:50.542279Z","times_seen":77,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tiketok.cc/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T13:42:17.862Z","timestamp":1783431737862,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/icon_box.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.279Z","timestamp":1783431745279,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/icon_box.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-114e\"\r\nExpires: Thu, 06 Aug 2026 08:22:06 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4430,"size_decoded":4796,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"6acc5ea63480977112e33d4e21c4cbef","sha1":"692bbadde81ff9b82b0343fa4c05dc82ad076cdd","sha256":"ea7e56e5af17e18a1e12e514e32a3ef40928d522aeb031f1388c2d9d7796f515","sha512":"2fc39f0266ca57bec9808ca8e074c3fe6e823422ad950d896e4b66df066ca5dc80ed991796bee82acd0388a206fc470404c4068a82776f6406872bb3e1878ea2","ssdeep":"96:17vXZylQIxi/7YSvkYjYBQi1E3z5Opfgqgz3q85dze:1LXolQIxizsYp9+fgqR8DC","tlshash":"2c919ebc27ed8f93c30cc2fa4a17a722c4a06437e20ba190c6fd9340ebb6166416538c","first_seen":"2024-08-19T16:11:10.099083Z","last_seen":"2026-07-10T09:25:29.653654Z","times_seen":638,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/binance.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.290Z","timestamp":1783431745290,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/binance.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-ac1\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2753,"size_decoded":1689,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3576ae2afb7b018cccbc11fb586ead4d","sha1":"d8b52aeef91215777eb5ee5f1fcb755a7cb3e928","sha256":"d604cf7fd708659867e7210b69268a34e11ec5459cca52bcbbc7c78e633dedb7","sha512":"95363a6619637e6b1aa9f55d06ee0cd76799d8655aee3f8ec2fdf589ed9d0a24823dd547c6afaf976a2f8ca7b4bf1c755ab83db3c972d7ad6180e372560579d8","ssdeep":"","tlshash":"4a5194dc7b3819ecd1c26fdddf2858986b4a30bf3b1144c8c25eaf867997894e003485","first_seen":"2026-01-21T01:17:46.93469Z","last_seen":"2026-07-07T13:42:50.544195Z","times_seen":52,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/kucoin.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.296Z","timestamp":1783431745296,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/kucoin.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 740\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-2e4\"\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":740,"size_decoded":1019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1ffa6ed259792f099f12381904e01f6","sha1":"8e5655ec4b315dc9ae5274656744a9b803baf0a0","sha256":"0276a0d481e7e1f402b79a8b68ed73dc68d639f538b2f67877c3093190c79b09","sha512":"dc8290e99cfb93f9af6115fbf8de5c5fd92820b250b6d38c7deff9a7ab115b87c61552955629dd711d91865746ab8c1d784c6dc8b9509ece066f65ffa54a42e7","ssdeep":"","tlshash":"9401d7cafa88a928818a0ba48c3195d462ce592fefd12678b312c33758081a8ec20c58","first_seen":"2026-01-21T01:17:46.94201Z","last_seen":"2026-07-07T13:42:50.544941Z","times_seen":52,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiketok.cc/user/config?lang=zh","fqdn":"tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:27.460Z","timestamp":1783431747460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiketok.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 03:01:07 GMT","end":"Mon, 05 Oct 2026 03:01:06 GMT"},"fingerprint":{"sha1":"97:55:65:0A:2C:1B:0E:76:84:29:03:6B:22:57:70:EE:E1:8F:77:1C","sha256":"6A:E5:C9:53:DB:94:F9:2E:7A:C4:5C:29:2E:51:97:C9:D3:0D:CF:19:AB:16:2A:45:0C:64:F2:43:FB:A2:E3:66"}}},"request":{"raw":"OPTIONS /user/config?lang=zh HTTP/1.1\r\nHost: tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: http://www.tiketok.cc/\r\nOrigin: http://www.tiketok.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Authorization, User_id\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":459,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/chunk-vendors.0f23927c.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:23.515Z","timestamp":1783431743515,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/chunk-vendors.0f23927c.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-c5b56\"\r\nExpires: Tue, 07 Jul 2026 20:06:35 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":809814,"size_decoded":252618,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"dd3a84055652c9509b8d7b82cdc83031","sha1":"aab1ece921c4e5e4a2ead5835e7cef9038dc5458","sha256":"0716dfeb1737a027ebf3b8883d2d5d217c426920132f8f78359c410d3cc9b761","sha512":"96416ee9c05ae311191d208062af8f22074eaea0bf2942c3cc757f6a401ba6af37fd54ad2c5c88e1a31a507cb8be7b2b46941c0a0df81b9e076171378bf8fc87","ssdeep":"6144:OAP2Tfuc3bgxNcK1Zcn+1BEvmErZuWheKkvzzqSu++VSsoLhexeZyr6d5uoTTA:OE2TWPNc8ZcMKZ6vzzD+oLUeZeo5BTTA","tlshash":"1505088df286b0b60be760b5403f220bb2376959b40a84d4f675e4d4ad7894e2237f7d","first_seen":"2025-07-28T17:12:21.85524Z","last_seen":"2026-07-07T13:42:50.545605Z","times_seen":42,"resource_available":true,"data":null}},"time_used":1218,"timings":{"blocked":-1,"dns":0,"connect":203,"send":0,"wait":204,"receive":811,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tabbar/account.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.024Z","timestamp":1783431745024,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tabbar/account.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 897\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-381\"\r\nExpires: Thu, 06 Aug 2026 08:06:37 GMT\r\nCache-Control: max-age=2592000\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":897,"size_decoded":1244,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"22efb4d5304c2a4a9ade526451e40a24","sha1":"9ca4ca4ee8e5d8d841c83fd638d6a0ed8742b143","sha256":"7a1936376e28d918f93463cdbe792da24ce8cb40ce017c1cbbcb3f54b2e0f1b8","sha512":"a10792e46dd0975ea1046f588df6308724b105dcb958f703c8064b4971d67b36e58cdab11e1347bf9bd30ebcbf02c1a75dbdf0ad4c31fa0fead33766eb0bfeb0","ssdeep":"","tlshash":"9911e6fb13850028e274282b64a23745ea9798f8027fc07b0c4084f3e91b8bc80e3c0e","first_seen":"2025-08-11T17:15:18.625211Z","last_seen":"2026-07-07T13:42:50.546272Z","times_seen":71,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/icon_box_3.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.284Z","timestamp":1783431745284,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/icon_box_3.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-1073\"\r\nExpires: Thu, 06 Aug 2026 08:22:18 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4211,"size_decoded":4582,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"d4f8979b3d4018df19969be9034516f9","sha1":"cd6ed110c7796e771450e27e820b11f7940d9db6","sha256":"636491d3bb271b7114c8cc3a8b05577949318e025acbd978f644fa1dd449cc76","sha512":"5eb075dab8c90cf6592176262d7e57350575022e4a30301766231aa51bc316b768d7a8dce2098b3012f75e27196978d849ab72eca032641e8a5eda5432b778be","ssdeep":"96:ZEHnswxASzLSucX8QAu1V3H80aqpuT3ktzXPFmEtvaXyHcSxBEchT:ZQn3WSMyu1Vs0bUIXtpIdSxBEQT","tlshash":"bf915dd3d557f081e311e27e0d3410e85519a6edc731a448eee7ec1e7a2ba99426d170","first_seen":"2024-08-19T16:11:10.099878Z","last_seen":"2026-07-10T09:25:29.663176Z","times_seen":638,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/okx.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.291Z","timestamp":1783431745291,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/okx.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-78f\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1935,"size_decoded":873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffd069972193d46948a973f321d0775a","sha1":"6f1319a46145f6fd737d5194ab1800806863c09b","sha256":"ed2c29dcd5b7f5a6d5e49e4a68692afed29975c81f1cd16373014786ca8b649d","sha512":"7df3cefcac968a478c71505095bc1ff76f3490d77d9c9f47649ff346a6a4b29c1da999d1638212fbc1b59aa394ada1ac9cec23aaccede82d37b5e774b545c3f8","ssdeep":"","tlshash":"44412ac0105157ac0a67e44eefadc4d9632be4debdaa11e936cea3204e1f414b9469b4","first_seen":"2026-01-08T00:05:53.527613Z","last_seen":"2026-07-15T05:56:56.95271Z","times_seen":57,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T13:42:21.851Z","timestamp":1783431741851,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Tue, 07 Jul 2026 13:42:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Authorization, User_id\r\nAccess-Control-Allow-Credentials: true\r\nLocation: /h5\r\nCache-control: no-cache,must-revalidate\r\nSet-Cookie: think_lang=en-us; path=/\nPHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58; expires=Wed, 08-Jul-2026 13:42:22 GMT; Max-Age=86400; path=/\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":4,"connect":205,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tabbar/service.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.022Z","timestamp":1783431745022,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tabbar/service.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 808\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-328\"\r\nExpires: Thu, 06 Aug 2026 08:06:37 GMT\r\nCache-Control: max-age=2592000\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1155,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab3e9653020369f489c8b9f01af79219","sha1":"5cc7aa7076cfe83877904b7f3cfbebd37b3add2b","sha256":"31bc24ba25fb806264206361872938dea2a3b21d51ba5e67948db8a7fb5862b4","sha512":"54317ea35c6e03f22ec92de513950c3a64400b673ab81ada041cca6b73bee1f8ec618a80f97e3470cb0fff27264e40f91262a3aebb1cef0fd731511b5e6ebb88","ssdeep":"","tlshash":"e90181b7e112dd50c78d63e610aff006eaad3250c204b30b0f2e45a5487a7ca80d3113","first_seen":"2025-08-20T14:09:48.951047Z","last_seen":"2026-07-07T13:42:50.548124Z","times_seen":13,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/metamask.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.295Z","timestamp":1783431745295,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/metamask.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-13b1\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5041,"size_decoded":2029,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0103549b5dca7100830a06fc1a09cb9","sha1":"66bb235d22489bc64315ecafa3eba69ad6534a9e","sha256":"1cfcf8f491736713c43f6d926f445bcc939719285f14cb9552185217d13f418a","sha512":"42952229ccf39d05b0fe433c2db6c9c80358d05bf7c515e1129a593d4eeab535d2f39c6705ae7c0f5dd291da77dc8f427762f4fe2def041d89a3f75a0298392a","ssdeep":"96:Mxr8UM4VfezBx6PAWLmIu8fDb/jhl1x7nz:83k6fLu8LbLlxH","tlshash":"8da1240802a832fb886347f44f9d95f278d560efc51912eca1f078376319faea8d5e95","first_seen":"2025-08-11T23:04:23.431024Z","last_seen":"2026-07-07T13:42:50.549414Z","times_seen":58,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":390,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/amazon.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.287Z","timestamp":1783431745287,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/amazon.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-eba\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3770,"size_decoded":1752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8afd21507732b48fd5296527688d2fa","sha1":"35ec05355ce8c48af08d30b4d4b8a55817c54c75","sha256":"ff8e8742cfa24527f8034cd9e068305c67f8af888c97d5e928cbbf66bd5d9dbd","sha512":"d137c527a8cd55a16eeab866f3175f6a8159b53a6b9eec1f30c3a78f1677bf66cd8aeb6ee930b0add306994c3ffe6acb7485e6613be4e8b55a4e320db0b45338","ssdeep":"","tlshash":"9c71edd1fbb4926cf5cf47477f70a0ab3a4a247a3c638a44456e9b9c5c478d89a42c00","first_seen":"2024-09-03T23:34:05Z","last_seen":"2026-07-07T16:23:55.534465Z","times_seen":61,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/banner.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.278Z","timestamp":1783431745278,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/banner.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-984e\"\r\nExpires: Thu, 06 Aug 2026 08:22:06 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38990,"size_decoded":38797,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 564x352, components 3","md5":"24006d4da954ed02b0189b1b74c3cd4f","sha1":"ebba860be00103b1eb42f65a6c5606a186c55783","sha256":"bc736c5c328ca94627c1735a13a2d7e11b6902f206c9aa2abf181cf69fd398f0","sha512":"c5c34396c15996354af32d8df293c4da3440a07134deb85e67045a898719b58c685d0c178bcd89ac1f0bfa9afe5554e772943433766b6a78c6a092e251798a30","ssdeep":"768:G1nDbaEclQ5vL46ZZHzacyJ2j/qqg/SSTSzTTe8kvOa3INxv8mYXUAUiMB:m3z0KHza/J9rSMOTeJma3av8mPAdMB","tlshash":"c603e12a2988cad5e516b47463d7a7c5f208fd0f3b55630a36e71c256b3e24877b0d30","first_seen":"2025-08-11T17:15:18.612911Z","last_seen":"2026-07-07T13:42:50.555644Z","times_seen":59,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/coinbase.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.292Z","timestamp":1783431745292,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/coinbase.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-915\"\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2325,"size_decoded":1394,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1065dd5f7426d5f0c103a27405ec375","sha1":"ba2f20a3147198c8bce204af0a6023f82924a84a","sha256":"09d6d3bbf74ab5c594f5e549a97d04bd1c35b7f308615732ad02bbfa6209f205","sha512":"521d6857f52955c6f882d19dda477e2cb17fc4804d4c0402de0108cbcbf02db156ef1cec07f880154ee13687c325e40037cdb96f400c3cab1e59fd43e151357c","ssdeep":"","tlshash":"3e41de79c3ac27788e6a87b8976078f879df21ef91d0435c12b4d97073129cc9aa8cd5","first_seen":"2025-05-28T11:38:41.546965Z","last_seen":"2026-07-07T13:42:50.556336Z","times_seen":63,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-login-index.21be888a.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:27.239Z","timestamp":1783431747239,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/pages-login-index.21be888a.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:27 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-942a\"\r\nExpires: Tue, 07 Jul 2026 21:07:01 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37930,"size_decoded":13587,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36257), with no line terminators","md5":"7d1f09e89f2f3ec4d1c3d1a41789c5fc","sha1":"59dd792b525e5b05c41c2a70cfeff0f7bba80a85","sha256":"0ec276c20567b86f89e83097e08bac73d0692fb3615fd29af23e4c2891fc55c1","sha512":"64469c14f2484000068d5ee35aba7ab3a886fec6aff16ec2767c7ce76f27fa5907afb1b9048b16efbaffd7fb55e8af20f6931383ad4cfd8dc0d43699a77187f3","ssdeep":"768:6Hbtiav8okUQIXuovo7IBR3cW/L/x7TwW:6HbtDv85UQIXuVIBV7jVTwW","tlshash":"79032a30b0cab85e46578438209b550a6c316f7ba502fe96a7f1b5614ef9f4e1322f7c","first_seen":"2026-07-04T06:37:36.093818Z","last_seen":"2026-07-07T13:42:50.557439Z","times_seen":3,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tabbar/home-active.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.015Z","timestamp":1783431745015,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tabbar/home-active.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-c7c\"\r\nExpires: Thu, 06 Aug 2026 08:06:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3196,"size_decoded":3513,"mime_type":"image/png","magic":"PNG image data, 213 x 200, 8-bit/color RGBA, non-interlaced","md5":"3396c9643fe41b1aff86628323fb6fc4","sha1":"69b46b80712ac87276a8f0ca4f5f4ce99920799d","sha256":"31a36ea9ac9855a223d24a730dde96e22eddc5e1753faa16215288ccb5dca4c2","sha512":"81d4f04a9b8347c0db5bee51c3d790a5210631fc1f1cae28af039d1a6afe68767800a6094e632e20523288a0174ca873e1520bd31e7cbd4f2a30f8e43d9ac5b5","ssdeep":"","tlshash":"37614b500677fac01f897ee544e0a7a159253ac3270dd19c3db45c7b72a782d515da83","first_seen":"2025-08-11T17:15:18.595053Z","last_seen":"2026-07-07T13:42:50.558703Z","times_seen":71,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":206,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/tabbar/record.png","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.016Z","timestamp":1783431745016,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/tabbar/record.png HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 609\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-261\"\r\nExpires: Thu, 06 Aug 2026 08:06:37 GMT\r\nCache-Control: max-age=2592000\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":956,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"dbc5830013c22fc3ca6449f4a588a328","sha1":"8c64990eb58feeae07f82c80a25dab9afc1e0265","sha256":"de4238198df876d91cc490560d711203a414e2e5b67106206bef2411fec7728d","sha512":"4838837e1566b8d1cf356c7371fe083546357973c205ad4c88fdfc750499c3cf9f73705926e2e9917f9b6b1c539f5cf5ad2d5d44cfe651f209959b8299784dfd","ssdeep":"","tlshash":"a2f0b7937326fca08b3b94f7a854045a80391a5fdce6c6070f8463b41c33cb1441aa02","first_seen":"2025-08-11T17:15:18.623331Z","last_seen":"2026-07-07T13:42:50.559338Z","times_seen":71,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":206,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-home-index.0e606d83.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:24.984Z","timestamp":1783431744984,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/pages-home-index.0e606d83.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-4a5d\"\r\nExpires: Tue, 07 Jul 2026 20:06:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19037,"size_decoded":5240,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18508), with no line terminators","md5":"01c3e0f163b937fb45bab2b8f830ec94","sha1":"509f3077612c2d23a4e10e920016b2c7f058285e","sha256":"3141b6c0feaaff2a18aaa51627ef1913f3cd27aebab7c09be5dfaba5bc0dd7ad","sha512":"6752c67d2e6d5050eed7f4d92572ea6da101d494b085f3630994b7c7711e70c86e18a6db3e2bed8c7b56158617bc114c741944970c22a40c03d4bfd26297acd4","ssdeep":"192:gqecyRbpqYnfKFMlfZphHjJcbXXNqRsS0YNTBDMOpPFD40Jn:gqe3PnpVu8XVNTBjtkU","tlshash":"0282d620f54bf0ae481fc621717f0814d6702f71e234e699e7b1eea64ed99cb272265c","first_seen":"2026-07-04T06:37:36.073663Z","last_seen":"2026-07-07T13:42:50.561686Z","times_seen":4,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/favicon.ico","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:26.101Z","timestamp":1783431746101,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 07 Jul 2026 13:42:26 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nServer: nginx\r\nX-Cache-Status: MISS from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":339,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-17T20:26:39.255597Z","times_seen":540882,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T13:42:22.675Z","timestamp":1783431742675,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5 HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 07 Jul 2026 13:42:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: http://www.tiketok.cc/h5/\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/js/pages-account-index~pages-home-index~pages-login-index~pages-login-register~pages-records-index~page~f0d0a59f.30945857.js","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:24.983Z","timestamp":1783431744983,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/js/pages-account-index~pages-home-index~pages-login-index~pages-login-register~pages-records-index~page~f0d0a59f.30945857.js HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-3241\"\r\nExpires: Tue, 07 Jul 2026 20:06:37 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12865,"size_decoded":4008,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11877), with no line terminators","md5":"6747c32eda4b1fe2110d53584ee3bfe9","sha1":"e0a270c81e4a6dae1337e39bef92a63f8b2f7e55","sha256":"fc6eff3d1555791bacea2bbbe62661e4d0a53c22b666d63c58f0554c20672c76","sha512":"7f5225cff664d86d996de38d3757efa73c5827e16665391bcb08ce2e02014a1cc43cfe03181a1fb31c9416f87f40c5cd41c7c08e6a5458abfbeea9ea229db3cd","ssdeep":"192:pwYlSY++VcvVk+8ym/BqRs+QVO4qRs5Pjzdejrt46Pa+0eollaKq13:ppl8MSkJym/gTQERqdejrt46KaKe","tlshash":"ba42f814f1cfb8a509e34014216b1b0d513a3f6d9878a8c5fbe5a9f749e5a8c129fb38","first_seen":"2026-01-21T01:17:46.924978Z","last_seen":"2026-07-07T13:42:50.563843Z","times_seen":40,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiketok.cc/index/index?lang=zh","fqdn":"tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.274Z","timestamp":1783431745274,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiketok.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 03:01:07 GMT","end":"Mon, 05 Oct 2026 03:01:06 GMT"},"fingerprint":{"sha1":"97:55:65:0A:2C:1B:0E:76:84:29:03:6B:22:57:70:EE:E1:8F:77:1C","sha256":"6A:E5:C9:53:DB:94:F9:2E:7A:C4:5C:29:2E:51:97:C9:D3:0D:CF:19:AB:16:2A:45:0C:64:F2:43:FB:A2:E3:66"}}},"request":{"raw":"OPTIONS /index/index?lang=zh HTTP/1.1\r\nHost: tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: http://www.tiketok.cc/\r\nOrigin: http://www.tiketok.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS\r\nAccess-Control-Allow-Headers: X-Requested-With, Content-Type, Accept, Authorization, User_id\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":459,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":1486,"timings":{"blocked":-1,"dns":489,"connect":202,"send":0,"wait":585,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/images/partners/bybit.svg","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:25.294Z","timestamp":1783431745294,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/images/partners/bybit.svg HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:25 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1015\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-3f7\"\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1015,"size_decoded":1295,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2abe2e351e05370e2dd9e3f993fc74d7","sha1":"53e082314d3f2567998a42b77e13a19f7b3da821","sha256":"cfdd78577ffcc6d13618108452ec227cb43ed567ceeb6f5bc7b1bc063b30a675","sha512":"54e6e7acb3049cee1b2c37c240211317754920de65446cffadd31567240c0dc67885406e7edf5f173998f41b53c0c6783bd95e8bc253744f22987f3c4ee50e6a","ssdeep":"","tlshash":"791102c2d7159724b5462e7afc2e9fcd3f6dbc7b1e8017c654a6a64023d2b6a0bc0914","first_seen":"2025-04-19T13:54:04.47556Z","last_seen":"2026-07-15T05:56:56.949686Z","times_seen":72,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/static/index.2da1efab.css","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.tiketok.cc/h5/","date":"2026-07-07T13:42:23.512Z","timestamp":1783431743512,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/static/index.2da1efab.css HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.tiketok.cc/h5/\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c83fa-178f9\"\r\nExpires: Tue, 07 Jul 2026 20:06:35 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: nginx\r\nX-Cache-Status: HIT from L1:50\r\nVia: L1:50\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96505,"size_decoded":26861,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-07-17T17:23:20.159643Z","times_seen":6334,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.tiketok.cc/h5/","fqdn":"www.tiketok.cc","domain":"tiketok.cc","tld":"cc"},"ip":{"addr":"52.184.98.194","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T13:42:23.040Z","timestamp":1783431743040,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /h5/ HTTP/1.1\r\nHost: www.tiketok.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en-us; PHPSESSID=5a8594f7fa8f6acfac01b62ec744ba58\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 07 Jul 2026 13:42:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 808\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Jul 2026 04:43:38 GMT\r\nETag: \"6a4c83fa-328\"\r\nAccept-Ranges: bytes\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":1039,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (519), with CRLF line terminators","md5":"7b80e1b3d35f85e925f50c6cb14a4ee0","sha1":"71ab4707882e970ec87ba6b710f3a6a9241d3784","sha256":"6b22259adac92a4e95630942dc8ec53e9ccac1365d3434574fb9268b8cbe6caa","sha512":"232e89fd52d5cb10db1fb0de6d0b4bd274d506784e94893b09ae25d4f355127765361d7624fc28252b631930f42c5d5e7d58f9a0b4f218ecc6b372af104cdfd7","ssdeep":"","tlshash":"230141c62c21e00d07208a9174b2e12e89de45b9e990cc1138dc6aed4bf0b8ece6f810","first_seen":"2026-07-04T06:37:36.087193Z","last_seen":"2026-07-07T13:42:50.565601Z","times_seen":4,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"www.tiketok.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}