{"report_id":"8abd88c4-e845-4edb-b3bd-b966da8bd412","version":0,"status":"done","tags":[],"date":"2026-09-17T03:47:58Z","url":{"schema":"http","addr":"sundaeshower.com/","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"sundaeshower.com/m/index","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"title":"Shopee","dom":{"size":40969,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33551)","md5":"6abb5fc917892416a52063c4880fadcb","sha1":"7c5c4d033295c677cf1f4125906537dc6244d8f2","sha256":"914558ec5f5c1c03f1a3106e17570407242f08635c1a74cce868be6dde0ed45d","sha512":"6fb1987135e6553613b25079bd43d4d76809307299352e75d96e0dadad3aa9cdea82e2448ae3c0d6323259c5d8096a3946810c322995314d6bc7c75441fc4be4","ssdeep":"768:dEiJt/ZioUYII4qrmbA3p3VOjVoPhctEg:lEYII4qKbAY","tlshash":"31030132d0011a6f6263cdd1f234fb59a0a6eb1fc235940076ad875d7fc2ef8aa74196","dom_hash":"domhashb6b9eb30a7729d5be8714f35aa41a0fd","first_seen":"2026-09-17T03:48:08.813301Z","last_seen":"2026-09-17T03:48:08.813301Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sundaeshower.com/","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:47:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":13,"received_data":1712332,"sent_data":6434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sundaeshower.com","ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-04-03","domain_rank":0,"first_seen":"2026-09-17T03:39:46.470191Z","last_seen":"2026-09-17T03:39:46.470191Z","alert_count":204,"request_count":35,"received_data":2206115,"sent_data":17368,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"modernremotely.com","ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-04-02T12:51:06.036956Z","last_seen":"2026-09-14T04:20:06.597538Z","alert_count":68,"request_count":17,"received_data":939123,"sent_data":9760,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"down-sg.img.susercontent.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-07-18","domain_rank":506728,"first_seen":"2023-02-16T02:40:30Z","last_seen":"2026-09-14T04:20:06.700186Z","alert_count":0,"request_count":20,"received_data":3669118,"sent_data":11600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sundaeshower.com/lib/jquery-1.11.2.min.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.310081Z","times_seen":1975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-vendors.42f07336.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdaaed4e9e1d5e0322ea968e6f47ac0c","sha1":"85c58af8151ed5badcdca952295e8c6e7b3e1e15","sha256":"c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8","sha512":"e23c153981e588a4d6b99c8341da319ce7e9bb16036ff952a8a469910640505b6e7ee7bb9e6d06dc59082f537053bb46cc8d800b82de8a730abee7d743bf03d5","ssdeep":"1536:qJuH03+0goh0dbU2Q+39Ya7C5x+eccVdofh3q4A6R:qJuU3bCbU2Q+3MXccgpE6R","tlshash":"0553e788f2d5b070439771a8402f610bf37ae959b44d8498f625e8e1bdb8dce546bf38","size":65536,"data":"","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-09-17T19:26:12.320699Z","times_seen":893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.328182Z","times_seen":1222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-9c1c641c.471bd454.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1630e44870c051f166fa952f722d4725","sha1":"bc968080544a2e59e8e026de0abe54359d28e39d","sha256":"6c95e0a7e350c2c80e72c4240857bec35219ccbc7ad3fc34d61290e62a7c20c0","sha512":"a45ad5fc2885dd1e50f162373b8dd381440eded0a0ec9907082e5c05f0ec84ebe51874bd3d3835a1b53995f552adcb05f9007d845adb0c1e3cc046d2237966b1","ssdeep":"","tlshash":"7811cb4d39a5b1133b2b64a4106f72889de7218639bf6c91d164c4909f7258f116bace","size":925,"data":"","first_seen":"2024-07-16T23:08:15Z","last_seen":"2026-09-17T19:26:12.325918Z","times_seen":698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-09-17T19:26:12.300069Z","times_seen":4674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.320138Z","times_seen":1282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.310655Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-09-17T19:26:12.325303Z","times_seen":2560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"644f13180f8d398c886f534b07044cdd","sha1":"2d3349d384b50a385ed0b0d84a256be60a1e2201","sha256":"f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6","sha512":"700886a3c2a288eeadeec4b09884566eecb30f2530259b18a45147f07a02103fb94e144ed643f690de26e8b76119aa639f210c0d687cc957c82318be053ec72a","ssdeep":"3072:XuhzovpPNdJ+fzFgMxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIum/yXN:+hzopC0TmRQBPSWyd","tlshash":"0b54d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":279653,"data":"","first_seen":"2024-04-24T18:56:37Z","last_seen":"2026-09-17T19:26:12.311283Z","times_seen":1042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-09-17T19:26:12.303882Z","times_seen":1570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.322979Z","times_seen":1278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c51f03d35129d9d1a9da65b24cef7fa7","sha1":"1e1d550d978378980dc3aeb60012da86c2355c4b","sha256":"339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c","sha512":"8c83157d1a2d4bacafc89ed01d444551151772f1119272c303ace71aa12b6f1fba29da8c9597e2a9baf670c93768286a405a70186b92ba5aae84554b9123c1eb","ssdeep":"6144:K4lrdS1Vqp5xb+XzxEXdUfM2Z0a54VXTnDBHiSuLx8isMZg07LQi:7vS1Mp5xb+XzxEXufM2DEDVHDub7LQi","tlshash":"04c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":585656,"data":"","first_seen":"2024-03-05T16:56:16Z","last_seen":"2026-09-17T19:26:12.29611Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"981279ecf3a46fdc0768ba2c90a8e03b","sha1":"79c0ade5e1847d13968abcb23003dd6fd66546f1","sha256":"a1b2488a19afe5c457836c56613f33560025673fa2c594aff43b6d637139f931","sha512":"b61b4d0f2c4acdfff03cd7383938e2707627873dfd9d4467fe3561401b7d85e10faa944f1968431176369ca34e35d82e9af660b5b1e7fef089e28711dbeadb65","ssdeep":"","tlshash":"f921a42c2d5babf8930338b1a032c65068f8e51ff114af0677ae0fd04b757ee8818814","size":1206,"data":"","first_seen":"2026-09-03T14:14:04.734405Z","last_seen":"2026-09-17T19:26:12.328688Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-3f5c92ef.273dc7b1.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe8d26c490b5135aaae68dfe40d6ee12","sha1":"99bbdf4b5f26f1bdb16d04cfad7ab73021f6f763","sha256":"8d9fc49d1af9f70204e8a3c8f41221e4309c32a3816f5336855de623e396b4df","sha512":"eed1831a4de45a15f9ee78c5efdadea52f680acc1372f0c305838313bd4cb87a59df13d78238f61f4a0094c118d0e72b9a1d83ea0045b63a18ae89d4c0affce1","ssdeep":"3072:xNn/ViAs300OOMgXZ1P3TCyAhLIKpB68W4PEoS3rTJXm1VKG5:3n/ViAs300OOMgXZ1PM68WBbTJXmff","tlshash":"8be33b1ab587e1aecc2ae051801f1934e1262fe9d125d086f738cdd496d8db83b7e72d","size":154005,"data":"","first_seen":"2026-09-07T00:31:18.852066Z","last_seen":"2026-09-17T19:26:12.312349Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/lib/flexible.js?2222","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4065,"data":"","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-09-17T19:26:12.306066Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-09-17T19:26:12.299558Z","times_seen":1629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","size":3883,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-09-17T19:26:12.321289Z","times_seen":3642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","size":57411,"data":"","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-09-17T19:26:12.316217Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/app.ff1b78d0.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bf6d4a5cc98a9a455ea2fb09e7b786f","sha1":"f80dc66def94d51491c45880275087535ecaac8c","sha256":"fcb5c2f065988469ef773e601c6efe23b2cac030b76178cbe3f53d7a57592ced","sha512":"6375618e69d7132c1bdf1dd5653809e92ccd181610dde26ca7f3a7a04f42c323120ff59f58f986bebc688c679203dbfd6c018e62ab1e8474d0ac8183eaeadf58","ssdeep":"12288:DczxPf2I6qFRDu2XKkd6lX8I82S11yo52ZQi3Qn1+paHilpHrpeU9ogO/xXUvaNL:DI2eq7XjuAuqV8","tlshash":"a2457d9833deb6f60042e456500f3e3c71661ebaf75691816c31e69c26e9ab14633f3b","size":1277781,"data":"","first_seen":"2026-09-16T20:22:35.880733Z","last_seen":"2026-09-17T19:26:12.327652Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-06ae24a4.686330fb.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"676e3a2df47d8e40c29c2d1a67127eec","sha1":"e54e8144ef939162c151a843933a98ff020a2641","sha256":"6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4","sha512":"4314d28a687dba60202a2a5974ea1b39b02a45a2fea359503396553b4bf9c1eebcc4168357fe2e43875ddd2e61c2af72b926ee6a61bc978fae9474a77de421bb","ssdeep":"","tlshash":"c0b02bbe2804790808bfa0e4300b33d8048301003f711ce507b020902b74e8e4303a4b","size":129,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.304921Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://sundaeshower.com/lib/flexible.js?2222","line_number":12,"column_number":17},{"level":"log","text":"devicePixelRatio = 1","filename":"https://sundaeshower.com/lib/flexible.js?2222","line_number":38,"column_number":17},{"level":"log","text":"dpr=1","filename":"https://sundaeshower.com/lib/flexible.js?2222","line_number":68,"column_number":17},{"level":"log","text":"Locale.useid","filename":"https://sundaeshower.com/js/app.ff1b78d0.js","line_number":6,"column_number":623087},{"level":"log","text":"websocket连接成功./api/websocket/server","filename":"https://sundaeshower.com/js/app.ff1b78d0.js","line_number":1,"column_number":13936},{"level":"log","text":"订阅/refreshNotice","filename":"https://sundaeshower.com/js/app.ff1b78d0.js","line_number":1,"column_number":14597},{"level":"log","text":"订阅/refreshUiUser","filename":"https://sundaeshower.com/js/app.ff1b78d0.js","line_number":1,"column_number":14597},{"level":"log","text":"订阅/refreshDict","filename":"https://sundaeshower.com/js/app.ff1b78d0.js","line_number":1,"column_number":14597}]},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.942Z","timestamp":1789616840942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.13.2/vant.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 499\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 17 Oct 2023 04:33:30 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1aCcnVtAB0ywZpO1WZJcN46UitPNcnUSQmiAmrzrZLBML%2B6ymhm03ZeVyCECT0s8uopWG%2Bf6RP1UM%2F7Fyd6ZxqIPcGlUTOHkb%2Bs621ZrjKrw7TIBdarkzmoUlww9uqcrSMhG1pG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107e9ce1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279653,"size_decoded":68917,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57301)","md5":"644f13180f8d398c886f534b07044cdd","sha1":"2d3349d384b50a385ed0b0d84a256be60a1e2201","sha256":"f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6","sha512":"700886a3c2a288eeadeec4b09884566eecb30f2530259b18a45147f07a02103fb94e144ed643f690de26e8b76119aa639f210c0d687cc957c82318be053ec72a","ssdeep":"3072:XuhzovpPNdJ+fzFgMxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIum/yXN:+hzopC0TmRQBPSWyd","tlshash":"0b54d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2024-04-24T18:56:37Z","last_seen":"2026-09-17T19:26:12.311283Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/common/dictEnumMapAll","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.028Z","timestamp":1789616843028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"POST /api/common/dictEnumMapAll HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://sundaeshower.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sundaeshower.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7882,"size_decoded":3660,"mime_type":"application/json","magic":"JSON text data","md5":"e4ad54ad54a80e2842b70a8974f03af0","sha1":"6e54083fb263f5f407c6e8ce5a1e789739fc5468","sha256":"9a4aff9795944e48e7a85b4ab6aa7e08483dbfdd627e92331ccedaf4df1b7b68","sha512":"e702374c2f04b9df0d4d46b06ae9d79dab0626640276eae740f78b93a7744d32499b6b8032f17a4a763922036265af98d31c4407b853012344cade2143b1be0c","ssdeep":"192:e2Y1Ys18r262EQEZSuG5R1INERWD832Af2:eC262EQEZSTb1cD8mAf2","tlshash":"4cf1d680b38c9db08c52d51155933c2979712adef21c8260a6f5fe4db08cb53b71bae6","first_seen":"2026-08-07T14:18:45.888856Z","last_seen":"2026-09-17T19:26:12.321828Z","times_seen":46,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-9c1c641c.471bd454.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.849Z","timestamp":1789616843849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /js/chunk-9c1c641c.471bd454.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-39d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":925,"size_decoded":709,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925), with no line terminators","md5":"1630e44870c051f166fa952f722d4725","sha1":"bc968080544a2e59e8e026de0abe54359d28e39d","sha256":"6c95e0a7e350c2c80e72c4240857bec35219ccbc7ad3fc34d61290e62a7c20c0","sha512":"a45ad5fc2885dd1e50f162373b8dd381440eded0a0ec9907082e5c05f0ec84ebe51874bd3d3835a1b53995f552adcb05f9007d845adb0c1e3cc046d2237966b1","ssdeep":"","tlshash":"7811cb4d39a5b1133b2b64a4106f72889de7218639bf6c91d164c4909f7258f116bace","first_seen":"2024-07-16T23:08:15Z","last_seen":"2026-09-17T19:26:12.325918Z","times_seen":698,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/css/app.4977d7e5.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.914Z","timestamp":1789616840914,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /css/app.4977d7e5.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-1e645\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124485,"size_decoded":26646,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bb3864415f752c8b30e19923db71e945","sha1":"cce5d2cbe5fcf3f42935ecbbb76a6dc9b98e338c","sha256":"49f7eb6580168adcfba5cc98e2e1a73d3b94be9af886dd294d6026ef2a2fe682","sha512":"bb05c0d5044af4e74155a60273281c2b9b4668467b649a89832bb4561758bb0fbef696c4fc8338d09238f1440edf1fe74aed49dcf57be5a0559de26e688b697a","ssdeep":"768:NId3U6o3V+4+6agSMJvSL7IfS0GHGHUjOUZkNxzi6zZyuc48gQ6pVU8eS2A6kiqO:NIK6o3uIfS0AiUjlinziGIW0xmBH7Cz","tlshash":"a4c38797bad9250cd9978a91c59a3efcfdbb191183829cd3e4537bba9f453cb221001c","first_seen":"2026-09-03T14:14:04.692483Z","last_seen":"2026-09-17T19:26:12.294633Z","times_seen":33,"resource_available":true,"data":null}},"time_used":1241,"timings":{"blocked":-1,"dns":0,"connect":247,"send":0,"wait":496,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/loading.png?2222","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:22.177Z","timestamp":1789616842177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /loading.png?2222 HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/app.4977d7e5.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:22 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]}],"data":{"size":13531,"size_decoded":3191,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"bcf23fadbcb599a2d8f4057f41130818","sha1":"26e846fd93fa9f24bc3e50c379b9bd5ce0c13f53","sha256":"4cd8754bd187afc15f659a47c38c465557193d6d9c90529046c585a39f087fe4","sha512":"ee84abf9a60282b386e0ec53d45f81d2b13f749f02e0d9772b2e4cbfe27eb2829d716118fb8cb47ef6a1a13f8105a34c43393d18a539fe9aae33bbef8b8097e2","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/mD02r/UL7DBfrJgiAQntyztM/Z0tYn+ahaOa0acaZ:vOZUEolDBjJyQntyztM/Z0tY8","tlshash":"03523b39d601619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8d5f8f38fd40627483","first_seen":"2026-09-16T20:22:35.844691Z","last_seen":"2026-09-17T19:26:12.301858Z","times_seen":8,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.848Z","timestamp":1789616843848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /css/chunk-9c1c641c.e8c0cdcb.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-11d34\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73012,"size_decoded":17532,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"67c01e545733ffb96d5e13dede76110c","sha1":"c0384799193994d10acc1da2bfcd1ac31264d65e","sha256":"6b71e44b1d800bb0d1404d7f5cb751d45239eaa03e7a2960e33478f0b5a8d1a6","sha512":"943c2fe464c545c1fc457c042b4c6d37cf10d1863063c666f83f3af9e8add4ee9cc27e4aefae437361cb65eb5362703882fa1483ed841e1b9e23c2031339341e","ssdeep":"1536:K81neLxbOfU6prVTG1Bo35sCe0MXePDsHme:K81ndU6prVTG1Bo35sCe0MXePDsHme","tlshash":"0b638472f991261d71178664a19576e85b3bf012c2421ff9f02a7b358fe72c6372238b","first_seen":"2026-09-16T20:22:35.838081Z","last_seen":"2026-09-17T19:26:12.316749Z","times_seen":8,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/cfg/202609/15/a03bcf94b3bc4b25b450eff44db6bd1d_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.793Z","timestamp":1789616844793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/cfg/202609/15/a03bcf94b3bc4b25b450eff44db6bd1d_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43213\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 15 Sep 2026 16:29:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43213,"size_decoded":43509,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x840, components 3","md5":"cc520e12405d6b1785f37ed2e742f865","sha1":"34f72f8c2260ac536119c37817215e1af3a7e385","sha256":"8d19ea6da196d7f7d2ff25009e182a4c651e21cbe56896304ebacf29a283ff4f","sha512":"da5627f62e63550dee2652f274c88592a1e398512720bfc81e01d4c2c31c468a3acffd9b5d07ca47108ffd4d014576fb0e8b15570042792b35b4918e34f5d50c","ssdeep":"768:Nhaq4ySDeEcddqI3InzuMmfh/KVZo99GmlrDNjij7xMfh4PCpTnQZK:PVaevdKNmpCVKqm1DNefxyh46QZK","tlshash":"1f13e112d75bc68fe676277265e38b3db7d63458c2cc0e63ab580c6839bb3042f56140","first_seen":"2026-09-16T20:22:35.85275Z","last_seen":"2026-09-17T19:26:12.301145Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1462,"timings":{"blocked":-1,"dns":0,"connect":244,"send":0,"wait":487,"receive":243,"ssl":488},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/2.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.287Z","timestamp":1789616845287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/2.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 36342\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-8df6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36342,"size_decoded":36583,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"ff2583db35c4acd87cbf195af9e9b202","sha1":"accfcd83b3d9f5de5aefe233ab1add6f800486c4","sha256":"8ce9d693209b66c96c19a29f83c57bf0389d81fc8e5ce4dcea63a4cc2c821928","sha512":"a5c52846621635a06e1ba79aaac03280f0c1ac38a51430b833afe536657eee5f703c432fbd23f5a8f82a4e47bf4e4aa21449ec597c8686e19c962d8c0d3d8060","ssdeep":"768:RJfYhYn07EF8k04B5h2FBHS/6W9tvQpxzP+QwV8QSciig7ETgzbCU:HfeeqRAUFBHSiMt4zD+QwaQSz4Cd","tlshash":"b9f2f1f1d0039a1166296b56eca2dcf3253a0c95807325fe1490c56f26ed1f9f17af8e","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-09-17T19:26:12.319619Z","times_seen":390,"resource_available":false,"data":null}},"time_used":1546,"timings":{"blocked":1263,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/theme3/tabbar/mine.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.412Z","timestamp":1789616845412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/theme3/tabbar/mine.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 4660\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-1234\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4660,"size_decoded":4900,"mime_type":"image/png","magic":"PNG image data, 138 x 134, 8-bit/color RGBA, non-interlaced","md5":"9257d7d41f0aeb65c674ea3ee19ef1b4","sha1":"826e3ae0ef20a7f48f69fd5740ff48212d05ecb0","sha256":"f4e0220e488ebe9e5176c587603b0756cc755a8649c13344aea8652d57cd5562","sha512":"e459264955355f76655df49a7ee28a76e31b84ebd37a8fcd2703d011b8eb29696ed01177dbf79758c952b29802b4afb7da894aa869b6e6c596f988764a444de0","ssdeep":"96:F9ICo03ee/GROo9AO7s0BPYx6GYWNHo6JxG/jgIZpEN25Vnj802NKo+pTp3p1:4L0uqrydGthNI6DOgIZzVnjj2NAp3p1","tlshash":"95a16e1391ede97e449c890166d2053db96b3bf0c68897f4149b2fdcd3b0e72b6810b8","first_seen":"2023-05-03T23:27:44Z","last_seen":"2026-09-17T19:26:12.302875Z","times_seen":527,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":1130,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.906Z","timestamp":1789616840906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.14/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 499\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 24 Aug 2023 16:36:19 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGYScOMGYakwVU1RDVicTsh6fUB%2FO6VrH1%2FpT%2FN8BWAzw9PfAeb2TADlosVdL8apPUCGwxqyYbyibYxD8gGCeZR6uHPHB5MzsSQxvTZlxlFSKg7zEwnN8XWWgq4NyIxnIwAqQKxx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":29356,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-09-17T19:26:12.314045Z","times_seen":1564,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":9,"connect":14,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/lib/flexible.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.911Z","timestamp":1789616840911,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-408\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1032,"size_decoded":839,"mime_type":"text/css","magic":"ASCII text","md5":"7524a2ba32138a0363ad48a78f4c7b9a","sha1":"aab46e82603b9de5b1880c0aaddc0d0f29dbf7a6","sha256":"d68ca73f7b227d0da6b310867a0a588530657bc433fce241b3b2aea1502c10c6","sha512":"77518eea3846fafd71ba1a086f06975e9ab22c2d1e55265795f62604d2411eec3a9a9ce50e6f5ce369fad4ad22e4346fb4547beae00e043fd7f48b5b21e9c252","ssdeep":"","tlshash":"081175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.317906Z","times_seen":925,"resource_available":true,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":284,"send":0,"wait":284,"receive":0,"ssl":572},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.933Z","timestamp":1789616840933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1076\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMZFQ7abGvxSxIA8YaBdCd%2F8w%2FrbKLgTMoyHvfxul8Eom3bMjT9ofnULJHCrSKkXTPMf3Zv7maqv%2Bu8JYu8rnYgL9EopgGxoZh7Jw87aFwzQx7WpCkWgV218RSWQ9firNQdQLNNO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22805,"size_decoded":7216,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.310655Z","times_seen":1256,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.940Z","timestamp":1789616840940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.13.2/index.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1335902\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 17 Oct 2023 04:33:30 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjoKApCIdRY%2FinK8h60rk4gXkpWHhoXqORpR%2BZb1D4xAtgAvyv2J13PYTp1rUgHCrfDQ%2BVYMLn%2BPjAFJG6FF6tbvGkCsLt1szpeOPakWlJBGLTBe1LBtC%2FUrMb%2FIlCbC6g3nInqN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107e9cd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40107\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146877,"size_decoded":41118,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fba0b10cfa931074254e7531f2cc9373","sha1":"eceff9fb867e11786cbbae234d0c697f0dd445d5","sha256":"7a6dee2202c1dfd3a499f873dee167942e255703859f86107d6bfc2272ea14f0","sha512":"556c2196cc479fd20fb3a1a6ffd6ce4836267b940a2b95bbcb8851d3f3a3e16c7286cbfd9d59ee8eb7ad5e3b58e3ba6d31d4ebe0cd0fd0cc2a30f1deb1ff6ce7","ssdeep":"1536:KC3MhK25tWrWoK3Unrx3WqyrtpqoSWEDZMAfP1rz12VLSV:KcrxmNH9yD3fNfMSV","tlshash":"36e3d52756c0236cb31bcd219bc496c5e224c123f5121bfaf1517a2dcfdbb9612a2b5b","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-09-17T19:26:12.304417Z","times_seen":1047,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/theme3/tabbar/order.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.775Z","timestamp":1789616844775,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/theme3/tabbar/order.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 379\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-17b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":617,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"549ffb680d0527849f31e5995d16799e","sha1":"5b9749927e26c7f219f9170784f37a9dc1861c6d","sha256":"c5ee884416417d216686fbbdc70e12525210e9c016655a7020f729d95e5d025e","sha512":"4326949b6fa6b271f242ade578b6712573f0e00ed5cd04ad9040c8522134bc535f048d40ddc68e9397e357d67126cbc991e6594f73eb52016a321411a0b7aa6d","ssdeep":"","tlshash":"46e0686b62a45dbccaa60e760fb0045280b0c9988516cfc6b16fdcfa0a018c855c5f55","first_seen":"2023-11-04T02:21:06Z","last_seen":"2026-09-17T19:26:12.308454Z","times_seen":520,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/theme3/tabbar/chat.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.777Z","timestamp":1789616844777,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/theme3/tabbar/chat.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1345\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-541\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1345,"size_decoded":1584,"mime_type":"image/png","magic":"PNG image data, 68 x 67, 8-bit colormap, non-interlaced","md5":"9a9a3c68d20119ec90a21aabb59aa872","sha1":"8d3d8da5e2cfff13f62d0230a8f50fb6eb850bb8","sha256":"c8fcf8de83cd1d7b76eafd9fc6cc4b69cbe6ade29a885d7a709125d9de8cfe39","sha512":"f664b99ccf9a56023f424176cdb57ffd85e44e11de244191095b55adda525b3c3e831063b6ee2eee0cba54d553048d1e7e3706ac7fdffb1c9c89e7acafb0bbb8","ssdeep":"","tlshash":"212130f8f1a80825c36dc2a5c562bb78229c985cd1ec6b893fd0d6af5d9cc5e1dc43a4","first_seen":"2023-05-03T23:27:44Z","last_seen":"2026-09-17T19:26:12.322396Z","times_seen":513,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/banner/6/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.805Z","timestamp":1789616844805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/banner/6/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.305541Z","times_seen":5433,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/banner/bottom_nav/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.807Z","timestamp":1789616844807,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/banner/bottom_nav/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1340,"size_decoded":662,"mime_type":"application/json","magic":"JSON text data","md5":"977ee5195b8298ff216e65f971c6cf06","sha1":"4833ac3afe8ee3f67371fea2e0d73aabb2b924f4","sha256":"0d60627b32b44f8bd3d880202e8411e5fa5fa0746357475117ef644590e6f189","sha512":"8828db735dcba2e204e9c2ae4a114742a007408e034b61da1805a7260b26addc5d19c5ec12bb7c445a87148ee8e05d24e1f1a12846fe338a359afb54a5ba41ec","ssdeep":"","tlshash":"9321091186a8fc794ed0d18211afb4868419333f81e5a12175c6eded4a889e6270f5df","first_seen":"2026-09-17T03:39:54.282702Z","last_seen":"2026-09-17T19:26:12.326437Z","times_seen":7,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.908Z","timestamp":1789616840908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-3b4ee\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242926,"size_decoded":34204,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0005accf931955eec5ed86f897e0d360","sha1":"7ae89839cacb8637600a3b0067fe8611edae2f65","sha256":"277dccf22d817aecf00496f547b3704907d454570f579e5f9d147435de498557","sha512":"121b37b857ea680cc979ad6337a0ecd55bf08cd25db73f7252609c7eee616b62d68da9a906d1d7b692c28901db52af573ca473ea0ee321381a453c1dd46b7c10","ssdeep":"3072:AJW0UArN86OfTq6asxZSfXl3ydsO/NPaa:Dq6Loe","tlshash":"a23477a1a706114b743ac997bdc2e7454a18bee3d0224aedf11758d4f7cdaa42cb3f09","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.298983Z","times_seen":943,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/translation/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.337Z","timestamp":1789616843337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/translation/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393,"size_decoded":517,"mime_type":"application/json","magic":"JSON text data","md5":"58b9dcda65416e86d6127ec925acb3cf","sha1":"ec490693d6856fbcf0358f57db94d7dad6fe89e2","sha256":"f0ccaef475d6ccd03875475914cec7efa0be8df1a40f9c3e681b87244ac35310","sha512":"3ff1da6625134d9c10bf75c9d1cc7739e03a8ebbba01316bdbeccec626103d28ec6cd5363bf87b3d2982dcba7923ddb64eba2e5e75aa96d656804e2d66d4881e","ssdeep":"","tlshash":"57e02b30854cbcebf94284c28e0ef21224ec4531ab093a1ce5c8173511deb2682c4853","first_seen":"2025-06-28T06:26:51.110564Z","last_seen":"2026-09-17T19:26:12.300573Z","times_seen":359,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/theme3/tabbar/home-sel.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.773Z","timestamp":1789616844773,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/theme3/tabbar/home-sel.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 678\r\nLast-Modified: Wed, 16 Sep 2026 05:34:02 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa2a4a-2a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":678,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"77799daa36d79f46d4b281b47653ed1b","sha1":"55373be89e5b80041a0498a720e73db384b30236","sha256":"72587bba2c08d4d3224cfd5c5be4be51b84741142696938d00361e372d2c8813","sha512":"eae2e0e6d68a4b7e1542cd846aa3fb78cb007b0a62f860425bfb544b1c89c9d34eec213d2a344353a0dc30521f4d529edb983f7b4d2c1acfcd1e54cbf7fec813","ssdeep":"","tlshash":"43018393f30668269ea14ee7c33f9178e088c99715e864696a82843d1370ba8f52d267","first_seen":"2025-03-03T23:57:52.309985Z","last_seen":"2026-09-17T19:26:12.297945Z","times_seen":342,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/banner/1/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.799Z","timestamp":1789616844799,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/banner/1/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":841,"size_decoded":589,"mime_type":"application/json","magic":"JSON text data","md5":"9a9475b7a0334e688966072ca10c9348","sha1":"e06967c557a0081914792c62e814e1aad4e17da1","sha256":"f78c0d07507de240260b838de6ddd6ce71e997872c5ad74cc50f08f3becfb3d5","sha512":"8bf5f9e95d31f1387f6da0582e40a4c96f15a678bfbbb935a36400123dd09e8eda01c4d01cc8222c7b4ecbaa2bd0a9d2e2fde433e1bda4e0d461ec96c47253e9","ssdeep":"","tlshash":"11012919eb76e8bda9d7808251bfb0c9542c37bfc09162442582c9cc489c9766a0a62b","first_seen":"2026-09-13T08:11:49.776188Z","last_seen":"2026-09-17T19:26:12.302356Z","times_seen":14,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/banner/5/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.803Z","timestamp":1789616844803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/banner/5/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.305541Z","times_seen":5433,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/1.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.286Z","timestamp":1789616845286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/1.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 18722\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-4922\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18722,"size_decoded":18963,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"3959345f02bfd3d6d23caea239421486","sha1":"6b3a7d485bf821b44756370daafe7887eac3faef","sha256":"9c31875158648f5fd608decaa75ef24630d45a12a9950f301fce4ac2814c827f","sha512":"5895c63b0d04e95e847d30b72cb774f65373ebc6f2b39fa9f81e82a687a85754cfb26a666c9ce61be566f2a265738da37acc893ac5f25210ccb4274f47575e88","ssdeep":"384:6OJnQgn+7xREPkpGf5Pp3t7yqujGILm2D6aOI0/Jnu6+hyQ75cV+:bJOxREdpkqujBLm/5I0tge+","tlshash":"5d82e026fb1a2d45ebd9b24a65c2663eb4671b935360e3a0fcc8ccd44c601a2d41eed2","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-09-17T19:26:12.312867Z","times_seen":382,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-7rbl8-ll3rjhzieonm54","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.359Z","timestamp":1789616845359,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /file/sg-11134207-7rbl8-ll3rjhzieonm54 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-7qvdd-lha3opqxcot82d","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.393Z","timestamp":1789616845393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134207-7qvdd-lha3opqxcot82d HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 371722\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"145dafbc0f0016cce7f65beba7364f71\"\r\nx-mms-request-id: 118ee752fde14959b82d0ee6dbf3423e-6aa25b1c\r\nx-ser: i2315741_c11460, i2289145_c27117\r\nx-cache: HIT from i2315741_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":371722,"size_decoded":372165,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"145dafbc0f0016cce7f65beba7364f71","sha1":"d8894f312f3f0051132449b757198971223508ef","sha256":"2c88822e4215329cc1b16089daab450e6e30a986ab8bc94fa9149e22da3a4795","sha512":"104cc1239a2cc3c34a590d1353505592afc1e265f7b1898892acacbe76ea7d3543315fd41ab7b3d46a45f3f19e0f016205649117e99c563085bde50acd275790","ssdeep":"6144:GLrKT0ad4QK7AX9ER7M1kvMf4iFDeuyxPaAPMBdsmXr7P/2S/IG0ihd5EjKR:yKT05QK7AtYg1kkQuDGvGyurbWCAU","tlshash":"1a84227d652cc0b9fed9027a888bbbf27bc4e5f019c1d3d260667944b57a8c6f784488","first_seen":"2026-02-22T12:05:09.179905Z","last_seen":"2026-09-17T03:48:08.86139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":217,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-3f5c92ef.273dc7b1.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.877Z","timestamp":1789616843877,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /js/chunk-3f5c92ef.273dc7b1.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-25995\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154005,"size_decoded":66157,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65006), with no line terminators","md5":"fe8d26c490b5135aaae68dfe40d6ee12","sha1":"99bbdf4b5f26f1bdb16d04cfad7ab73021f6f763","sha256":"8d9fc49d1af9f70204e8a3c8f41221e4309c32a3816f5336855de623e396b4df","sha512":"eed1831a4de45a15f9ee78c5efdadea52f680acc1372f0c305838313bd4cb87a59df13d78238f61f4a0094c118d0e72b9a1d83ea0045b63a18ae89d4c0affce1","ssdeep":"3072:xNn/ViAs300OOMgXZ1P3TCyAhLIKpB68W4PEoS3rTJXm1VKG5:3n/ViAs300OOMgXZ1PM68WBbTJXmff","tlshash":"8be33b1ab587e1aecc2ae051801f1934e1262fe9d125d086f738cdd496d8db83b7e72d","first_seen":"2026-09-07T00:31:18.852066Z","last_seen":"2026-09-17T19:26:12.312349Z","times_seen":23,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/banner/202609/13/ed49274db88f49a0a5250996501624b5_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.069Z","timestamp":1789616845069,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/banner/202609/13/ed49274db88f49a0a5250996501624b5_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 198244\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Sun, 13 Sep 2026 06:09:18 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198244,"size_decoded":198541,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x524, components 3","md5":"7ec77281b3bba80ee5e4098cdada6001","sha1":"9619a4043ada5db8e51ae813b92523c211b8226b","sha256":"fc51eb1ef4a2ecf863f938afe0d5b6c7bdd6e2e6af4fee8dfbfb67c8a07ada17","sha512":"f1a5f5eb7269eca98efd852001499fe34d802ed5e9709c859141bce5ae689059aff6b6845ba918399406f4345dcae83d6ee794216187ced33fe3300e23c441a2","ssdeep":"3072:cRzCAdgazaFG1ycIWL2KQD0JmKzM+ijCBXdIBqndBpUnYrqKv0Dx0jSZLuU:e+naW68fuJhM+aBqdUY260aj0LuU","tlshash":"271412570bf9653938bc9b49ff4cc821b249e3a271245275af7d63412efc8d4d6a038a","first_seen":"2026-09-13T08:11:49.766197Z","last_seen":"2026-09-17T19:26:12.319045Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2227,"timings":{"blocked":1735,"dns":0,"connect":0,"send":0,"wait":246,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/3.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.288Z","timestamp":1789616845288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/3.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 8867\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-22a3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8867,"size_decoded":9107,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"e4a31cebcd48ee42064cf018c7f7ca39","sha1":"cfdfe2bc0addceae1a278b3200f26e892442a012","sha256":"4817a82e06c2b1293ba0c004e25171fad0907185d9f908071da98073c97af82e","sha512":"5f275514fa941b217090af718ddcd3f5e403d79a9202f3743bf25eb1420f6eb906b99f75f0802c9477d012c255b7896c754912b9d97179d96942413ddd5aa536","ssdeep":"192:BoBlcRpVLro+q/cXMr2nQFlFyPztChcQfxo5Z1S:NRpBro+q0MlaZGs1S","tlshash":"86029e15f0156c57a63bb6a6836958c0bc09d18e30860c64d7cebe997365ca5cc40ffc","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-09-17T19:26:12.317351Z","times_seen":384,"resource_available":false,"data":null}},"time_used":1509,"timings":{"blocked":1264,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/5.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.290Z","timestamp":1789616845290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/5.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 80247\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-13977\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80247,"size_decoded":80489,"mime_type":"image/png","magic":"PNG image data, 1280 x 787, 8-bit colormap, non-interlaced","md5":"af912194c0220ac8509ef46e55f12d0e","sha1":"cd38228a5fb07c66972682299373defedb825281","sha256":"d55a75cd237e29955dcaefcb734cfb17a07a9e1046e8b049458070d726b5a076","sha512":"667efd70bc771754effc1fb9c6db95bca5352e9ab3c81cfbc9d38f101ea335592a5da98f78cc08f787dbd8e49789c7b25dcf1edbb0f529e05c26cb7638aef1ac","ssdeep":"1536:6O6hpb3eZ5fb8UEfnCYVtm0ipqX/mye7BmiYCHcSAlk5ak8SvycLwL3DlTF:spb34D5wDMqX/k8ilHdAlkuSvt0r","tlshash":"5773029327b43804d55abbb97a0b481098173b7307c189dff2671ed6ea6346ff4e0289","first_seen":"2023-06-13T01:19:11Z","last_seen":"2026-09-17T19:26:12.32467Z","times_seen":337,"resource_available":false,"data":null}},"time_used":1986,"timings":{"blocked":1495,"dns":0,"connect":0,"send":0,"wait":245,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/lib/flexible.js?2222","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.912Z","timestamp":1789616840912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /lib/flexible.js?2222 HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-fe1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4065,"size_decoded":1617,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-09-17T19:26:12.306066Z","times_seen":950,"resource_available":true,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":246,"send":0,"wait":246,"receive":0,"ssl":499},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.926Z","timestamp":1789616840926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1207\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrHpH%2FPhGbS2NrMrtWKT6%2B9Af4NEqW7F%2FuwH8HgEb9TTdJ4Fs7MozupIHA6AaRZ3EP0ad9KVRqglfHvGBjnIGCH6sW8f33GTXVOVgfELofgx1YYoOd2XPUbbUP7P918iY1EdWTFg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92051,"size_decoded":28076,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-09-17T19:26:12.299558Z","times_seen":1629,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.929Z","timestamp":1789616840929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1076\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKST5H2pxdpkTcC61SSX6lr7zDlWFGVklWDAKrdddLlsxeqGmt755NEePot8tLfinH6ejT7R84nBb8nHMT5wuvG%2FhfAgxRgtQI9mlZRGAAn90HPO0itRgY%2BS%2Bm4Zs2thqvDNOaMZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13638,"size_decoded":5228,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.320138Z","times_seen":1282,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.943Z","timestamp":1789616840943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.6.1/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 499\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 28 May 2022 05:01:58 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFcPP1Qdk%2BRkejFhurBsxaPM7uqR5UbbbNoZKVOfn94DFk3c90mUpkLjwc49cgWW1VsHaKCXRaPiLOabjOwQy%2BH1oy9bGzJUoy2muTSvveQetotWq%2FhCpCtOaQnvG8DqXe%2BZAMxz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107e9cf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57411,"size_decoded":15487,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57310)","md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-09-17T19:26:12.316217Z","times_seen":129,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/grabGoods/randomList","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.804Z","timestamp":1789616844804,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/grabGoods/randomList HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6433,"size_decoded":2402,"mime_type":"application/json","magic":"JSON text data","md5":"b879e56fd8edce1cd55cd65022ad97bb","sha1":"8686681454c01ce774a3b5dea4b7217271a6a826","sha256":"badef536a19c21f243c308ac06a805c152250534f4f0654fb8d48970ad1ef8a7","sha512":"7e79cfb6f56b7026d930946094811fd60091d160a5104464011aac357cb52b14ea20ba09536e735e971f20bd62358f76e6ce125a423f8317a5ae5166c531e1a3","ssdeep":"192:eHpRVNA5NXijzNHqhyWoMuVBRwNjemCq5lw9VGwHAW3/mXrFkRQAaHSa7/:eHpNqxSxKs3nVQxejuIVTv3/6hkRNw5j","tlshash":"e0d1438f8f94b8acadc0c946906bb58e50c9bf1e81a1c78d64c29f5cc5886f725dc4e4","first_seen":"2026-09-17T03:48:08.867336Z","last_seen":"2026-09-17T03:48:08.867336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/094a893872ffa4105419b70c51ac3e80","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.395Z","timestamp":1789616845395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/094a893872ffa4105419b70c51ac3e80 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 170208\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"094a893872ffa4105419b70c51ac3e80\"\r\nx-mms-request-id: ffbcd2328b2846b7bfc187fdaf6f4900-6aa49859\r\nx-ser: i2315741_c11460, i2289077_c27117\r\nx-cache: HIT from i2315741_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170208,"size_decoded":170637,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"094a893872ffa4105419b70c51ac3e80","sha1":"e1a46138661f74593646b61b3e213ac451821973","sha256":"7998c52701f8e30089b8c566b99d4793d8ae4c3c428c57e4d408e15ee1936c81","sha512":"1ed2e03b9e7c1ee43ca660c969a9fb0e055e8d5cca2fa90fdd31ef3dad71a4bbab6a6132576bb958b30c49622485ac9c0d82ce53ba65bf9970c6c478f8a345cd","ssdeep":"3072:8lZLjZvwFoOhXTIKyGtMawWFDWC/LDzbmWFCkmfGhO6T/rRfYFv6X:0IpjnbtwWFDnGQmdY/eFSX","tlshash":"2bf3f0638e295f67a619d3a87f4b1e5c1b54462cacc13afe20038dcb6e4ca351c9547f","first_seen":"2024-08-19T17:41:13.031554Z","last_seen":"2026-09-17T03:48:08.868552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":188,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.910Z","timestamp":1789616840910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 03:47:20 GMT\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-09-17T23:32:03.505241Z","times_seen":75883,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.931Z","timestamp":1789616840931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1076\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bw1uBhSv5KqYJmVlBR7Nxn9Gi1%2FfBX4uajsKj9N1YY8pkLPG4SwZQmQyF%2B2%2BccQ%2Bep%2FWgKkkeDK3CajbEQ%2FF6d%2FPmitN3SeLiStlwPpcQGri21V%2FgfecT4nNWn7EzwP%2FPDUNpYTb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9875,"size_decoded":3805,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-09-17T19:26:12.303882Z","times_seen":1570,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.939Z","timestamp":1789616840939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 499\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2hYhJQSXY2v4u%2FC2NqXLdMnwWwPJWThgetewNO8HLLoKMuGQZ7BQECpMhR5wK%2F7N5166YTFoZMEP8r7TKFyK%2Fsb7OQuVxcn5jbpajLCPr%2FrfTg1pcgrz9mVJYszaLG6xkHp49O9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107e9cc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":2315,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-09-17T19:26:12.321289Z","times_seen":3642,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/common/dict/allMap","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.592Z","timestamp":1789616843592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://sundaeshower.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sundaeshower.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14648,"size_decoded":6309,"mime_type":"application/json","magic":"JSON text data","md5":"b5bece687c3e56afb19d013665220b18","sha1":"04f2451c12df62b4161d7c1d5552101c00a7feff","sha256":"0d62f11718acb0e23aeffbc923a052b5dbf3c336505e6de210b1da769e5acbec","sha512":"2bd18a819b32a78a2e1d97682e6de16d6aeafd217c0f67c1d8a4ed3df68825fc3a2afd58bcfd7e693408228b27648e7aa15fda99ef8858ef700187f5c899073b","ssdeep":"384:Kw6iI/gct3RRoywMyrQROtMEj9gnhxqlQQJq2VqYo/04jC4SYyDf98O07Ae:KNazAKVqx/eWb","tlshash":"a762508cf70379b9dd0fac1491a8689e70bd3e771e89c2199a41f54532b1081da2bf2b","first_seen":"2026-09-16T20:22:35.858246Z","last_seen":"2026-09-17T19:26:12.311788Z","times_seen":8,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/theme3/tabbar/grab.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.776Z","timestamp":1789616844776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/theme3/tabbar/grab.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1197\r\nLast-Modified: Wed, 16 Sep 2026 05:34:02 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa2a4a-4ad\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1197,"size_decoded":1436,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"246e24ac329fef35a8fdbde1df7ee698","sha1":"ca6f3a8bc0950f9e97595b7630023f5aa3628125","sha256":"2e091bdafbd770da842eed04a365d8c70ef44deef1abb5ec7ec759c811bfd297","sha512":"faddd28e0a9a6165f917e405d1b85dfe9f2f7ee48c78d60624e67d3c3d5d7099085aff7a69e64ce2a5db29850ae452d06f9fa8fe1329f1d53c2ad50bed77efd3","ssdeep":"","tlshash":"5c210aa25a0d4f23957209b49cf56a50b4b8c9946fd99ec00c873327df8b924297c493","first_seen":"2025-03-03T23:57:52.331763Z","last_seen":"2026-09-17T19:26:12.308988Z","times_seen":342,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/poster/notice","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.797Z","timestamp":1789616844797,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.305541Z","times_seen":5433,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-7qvfk-lg3go3fv9fr45c","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.377Z","timestamp":1789616845377,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /file/sg-11134201-7qvfk-lg3go3fv9fr45c HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/country/list","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.029Z","timestamp":1789616843029,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144,"size_decoded":422,"mime_type":"application/json","magic":"JSON text data","md5":"3f298bb0ac3540cbad44910fb093be64","sha1":"6d19b9441aadc961bc7eb9e603f1e89726f7856c","sha256":"9d27cf53ecf5a19b4eb932ac6fdfbc476101f3854236fb3b15f922b293a0fcc5","sha512":"8146f0151618d4eeef50b085efe220aa791fcaedc99f59178273f5ad4e84bd9a4cf339f8708c87da8f24cdd8b42f1a0eada61d035859fd2544d9e91dcc093561","ssdeep":"","tlshash":"80c02b8a720cacfe47508003440dd36928bd00a6fc883c295ece9f65c1466f0021c827","first_seen":"2025-01-10T12:51:25.837389Z","last_seen":"2026-09-17T19:26:12.306542Z","times_seen":366,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-7rbmh-lmd4k5e9s6k9f1","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.383Z","timestamp":1789616845383,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /file/sg-11134201-7rbmh-lmd4k5e9s6k9f1 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-22110-gjizam5grvjv67","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.402Z","timestamp":1789616845402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134201-22110-gjizam5grvjv67 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 260479\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"7488277260672eb7ba6b907c6097d98c\"\r\nx-mms-request-id: 2a7cd11a74374e08bc49c1db7358cc8c-6aa6a793\r\nx-ser: i1935883_c11272, i2289071_c27117\r\nx-cache: HIT from i1935883_c11272(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":260479,"size_decoded":260908,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1000x1000, components 3","md5":"7488277260672eb7ba6b907c6097d98c","sha1":"4df5ee6c3e986ee922062a581f0952504a129b1e","sha256":"937e99ba6221138161e4d26fd7b3eb178b12910680f3634b3f8c98fde6f01527","sha512":"bf1dd16153b26b13ab61893e98be19403c9d2f706ee15a97583d606568ed8de37eba93d26d54065cdc0e2454500de6ec89c9067491a75dbb533cb6b2963b79b8","ssdeep":"6144:zcnc4eLgauL+Kq/gb8Ip9ID2+wDAB+uMmfRUoknvjceWIT1f:zyn2uLogNk2/sMs3knbce/f","tlshash":"5044234ec550c3ca6e3e1375e593658d2eac6718d9b90a0ea693acf2b7dd734040e23d","first_seen":"2026-01-07T05:50:39.751718Z","last_seen":"2026-09-17T03:48:08.873125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":326,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/banner/202609/13/d0850ddcf4b547d8aba317db069b773d_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.068Z","timestamp":1789616845068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/banner/202609/13/d0850ddcf4b547d8aba317db069b773d_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 145973\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Sun, 13 Sep 2026 06:09:03 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145973,"size_decoded":146270,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x480, components 3","md5":"ee9498dba5c5aaec807c67d6694f5501","sha1":"1a46864ff0af26e5d92e2e8610c15b87f63ba872","sha256":"f4834c61d96ab95a8ab68473eb0686779aa9ee638cc36ab9764cc0afe68f86ef","sha512":"433f7d3f2c12da98239f1cfac5475648dfcaafcb7848701602a745a3541b6a0a5def0e4915fd46e6a351f7b07f8b93d6799734f65b7e2aeeb84702cb2f0c8608","ssdeep":"3072:STqsXpu+2mJYNAh/vJCv/R0WH4xcUaWYspRTSu21DSdFK:STDXpb/h/xC3R0WccUyfxms","tlshash":"10e313249a1cdaf4f45ea1f48fe2550e4541c7aa855c3c0c3b0ea5d85eab707ad379a0","first_seen":"2026-09-13T08:11:49.771569Z","last_seen":"2026-09-17T19:26:12.293994Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1488,"timings":{"blocked":-1,"dns":0,"connect":245,"send":0,"wait":502,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/app.ff1b78d0.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.915Z","timestamp":1789616840915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /js/app.ff1b78d0.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-137f55\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1277781,"size_decoded":377437,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55240), with no line terminators","md5":"605539d75cb63f8ba850e9d1e29b8038","sha1":"5dd632eb8c1b94cdce5e9c684daec7b3d45ae334","sha256":"ebaa8b16a9dbc0af361ccb891a06a93833b10645f7f3de5b33e76c4824469db3","sha512":"6208c6a71bf01c4dc0bbce2038aef54d50f7f31b1a18db757d67c522d054463d72924e4d712443e44eb8c6523d8cc7c576c7f008b6329d4f9da4e6260916ac95","ssdeep":"12288:DczxPf2I6qFRDu2XKkd6lX8I82S11yo52ZQi3Qn1+paHilpHrpeU9ogO/xXUvaNF:DI2eq7XjuAuL","tlshash":"53356c8433de76f60142e856200f3e3ca1661ebaf746d1c16c71e69c26edab14637f29","first_seen":"2026-09-17T03:39:54.329911Z","last_seen":"2026-09-17T03:48:08.875906Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1983,"timings":{"blocked":-1,"dns":0,"connect":247,"send":0,"wait":495,"receive":747,"ssl":493},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/6.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.292Z","timestamp":1789616845292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/6.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 14547\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-38d3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14547,"size_decoded":14788,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"567f222c91a0adf2736760e9bd1ebf4e","sha1":"8f8df5a135c97c0b14c0fb5573ca00e822a19e9b","sha256":"cee5b962a078c675d90e9a0f9cefda41478d9a93e80ee69a0131e8931a531aef","sha512":"1155748926bd0d7379a8140f969caf8d6bcb508657c9a3a819501a008c8a114e745ff2f597d400147bf43147c0949f8016868d074781003c54ca66c3826f2d72","ssdeep":"384:6gJn5nsqCGCJs8P63+vOt1PAmO+INCl7SuIo:FJ6aif636FUIND4","tlshash":"c362c1ac36462c11a704fb24ce8414e3a7b314f0d2436ba39dc8dae61d715fa5c956dd","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-09-17T19:26:12.313482Z","times_seen":382,"resource_available":false,"data":null}},"time_used":1754,"timings":{"blocked":1509,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-22120-zfzpr95g9llvec","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.385Z","timestamp":1789616845385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134201-22120-zfzpr95g9llvec HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 311157\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"04a0688c2724d872a80ebcfef8e7c2f8\"\r\nx-mms-request-id: cef0d9349ad048459d555a8ee540f400-6aa1109c\r\nx-ser: i1911851_c11460, i2289145_c27117\r\nx-cache: HIT from i1911851_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":311157,"size_decoded":311586,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"04a0688c2724d872a80ebcfef8e7c2f8","sha1":"12e67e86479fc7f616afe6e74d1521d537ecf3a7","sha256":"a66c55de13e95689646a93d07575d5d331d1a8ef908f3a9ac3f552e5602a2716","sha512":"f87963f9271ead4af5664a17e32f5dde88a99c30966d71746e6a2a540f15afab2d2d4c3c0d7dd583feae7bd507db335f2b7859d39c2eb6a6545068f530c84304","ssdeep":"6144:QKSOE+0M0qT4X+PQcHGzwDsfrfkJgJCeJ5bfn/KInQozlGJM:TndT4gQcmzxQJgf5yIQokJM","tlshash":"736423edfdc470f7a4dda79a6ac8217e0406cbb3cab4fa697c102a45d75c022115ebc6","first_seen":"2026-09-17T03:48:08.877422Z","last_seen":"2026-09-17T03:48:08.877422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":261,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/id-11134207-7qul8-lhq2k46fhj6c76","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.386Z","timestamp":1789616845386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/id-11134207-7qul8-lhq2k46fhj6c76 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289035\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"9ccec86493580c215374231cb4f6fe87\"\r\nx-mms-request-id: cd0169c5ca1e40efa7ab67276a1bb752-6a9f16db\r\nx-ser: i1935883_c11272, i2289077_c27117\r\nx-cache: HIT from i1935883_c11272(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":289035,"size_decoded":289464,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x800, components 3","md5":"9ccec86493580c215374231cb4f6fe87","sha1":"2c46b8f6da851bfb690f93984092f15963ef22b7","sha256":"5eaff153dfcf0241ba87cf5dac126148e8b104bf1b9bcf13b084332091482ef1","sha512":"348ea710e8d77755acc4147fc4ea6720785b18cd61a7d2e99af901cbca057d3dc9f88e53f99b0164d8f93bfd43e61c668d0e978c8f986e8dde6f184b7dd08ba2","ssdeep":"6144:/sd8jmbZIo3I+p1IsuvrIjJZq0J8yseR8wr+bywi0Io7a8iHQ+7m+S:/sGj+7fOsuv81Wyz++fy","tlshash":"fc54232e8576d802dbba2c7f5da81e307e596b9cd5bd130b4f932055e02cbc0e4ab6d4","first_seen":"2025-12-02T02:39:13.303646Z","last_seen":"2026-09-17T03:48:08.878504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":179,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-22110-1u5b4kb7gikvfd","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.391Z","timestamp":1789616845391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134201-22110-1u5b4kb7gikvfd HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 170853\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"31c1af142488cd7ba969aaf2116214af\"\r\nx-mms-request-id: cc24c6a03fa9462ebb4f285c91c22efc-6a9a6ff0\r\nx-ser: i2315831_c11272, i2289103_c27117\r\nx-cache: HIT from i2315831_c11272(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170853,"size_decoded":171282,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 773x773, components 3","md5":"31c1af142488cd7ba969aaf2116214af","sha1":"165680477ac122496a044b6465ff1867c22b5f8f","sha256":"2098ff06328a160a4d5b4fc50794aa88cadc6bb401fedf29f617452a7119a895","sha512":"eace335978f0035b3cf09c751a499fcd433a668aadcc781902515c1db4a430766bf8ea1cab6c9e09dd83ef806a179f6f6400d26e215d961e42f92954f6305a26","ssdeep":"3072:p2lGdouen9jSaKHtxqUdj0z/tGkWplLdwHiGxurD2tSuiE6udd7DT9hebTE01yQa:ASekCUdj0z4/pByDurC7iE6udJRQU1","tlshash":"7cf312ebacee352a4b1b85bf930308edef52cd8e9241631048799993d5c8d32d25df25","first_seen":"2026-01-23T18:00:37.89016Z","last_seen":"2026-09-17T03:48:08.880458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":229,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/theme3/tabbar/order.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.411Z","timestamp":1789616845411,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/theme3/tabbar/order.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 379\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-17b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":379,"size_decoded":617,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"549ffb680d0527849f31e5995d16799e","sha1":"5b9749927e26c7f219f9170784f37a9dc1861c6d","sha256":"c5ee884416417d216686fbbdc70e12525210e9c016655a7020f729d95e5d025e","sha512":"4326949b6fa6b271f242ade578b6712573f0e00ed5cd04ad9040c8522134bc535f048d40ddc68e9397e357d67126cbc991e6594f73eb52016a321411a0b7aa6d","ssdeep":"","tlshash":"46e0686b62a45dbccaa60e760fb0045280b0c9988516cfc6b16fdcfa0a018c855c5f55","first_seen":"2023-11-04T02:21:06Z","last_seen":"2026-09-17T19:26:12.308454Z","times_seen":520,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":1085,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/websocket/server/info?t=1789616843040","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.042Z","timestamp":1789616843042,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/websocket/server/info?t=1789616843040 HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":450,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"147763eab7070df91ad06a5c8d139e98","sha1":"4d301d252e5a44c50116ac54fb82e57aeb1cf83f","sha256":"68fa5da8131c6085737ce9431817a0a4153be8065c3276b22b76d1e80c553391","sha512":"b22968cf27d0dc4dd324d875ccdc78effa679266d672ab6a4504e674bccf6a5e2c3dc9acb55d618524c3962c527419541895de77c6899db641c89d5db1c7b469","ssdeep":"","tlshash":"07a0121e88ac306444482b0103001d0a581804f7010091e8121826240a910110220247","first_seen":"2026-09-17T03:48:08.883064Z","last_seen":"2026-09-17T03:48:08.883064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/banner/202609/13/1cd2d4e43a8340b9bc1240a5c1680a98_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.067Z","timestamp":1789616845067,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/banner/202609/13/1cd2d4e43a8340b9bc1240a5c1680a98_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 146204\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Sun, 13 Sep 2026 06:08:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146204,"size_decoded":146501,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x480, components 3","md5":"2cb01894dcfe10c284a46943cc4fe41a","sha1":"dc629daff9fb4c9551d477f2fe315bea3b4d8471","sha256":"8f95b3a70c4c051873c5ee98b5ba2648d0002570dc3b94e8f56f48e422abc240","sha512":"d96f89daa0be17b1db7ec0e86a97764c707becc75760e6bd5bf8e934f4c57bbdeb7bfc73eb9632c16db5ee25da7c3bdbb9157ded85232799b81bb1ad514c43e0","ssdeep":"3072:cTD/KpndZmKn9giQp9sJkftG1+Im//qoDyO6B5lq+wfliFQVp6ZVh9aZpueBet:KCnd5axq6tG1+z//qZx3ojl6Lh9aZ8","tlshash":"dde3121e6e5c1e3e8d085b7fa6891190eb88b0b4b09e2af575e24174f361b3f462617c","first_seen":"2026-09-13T08:11:49.770482Z","last_seen":"2026-09-17T19:26:12.318449Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1982,"timings":{"blocked":-1,"dns":0,"connect":282,"send":0,"wait":567,"receive":566,"ssl":567},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/css/chunk-06ae24a4.fd43ee93.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.022Z","timestamp":1789616843022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /css/chunk-06ae24a4.fd43ee93.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-bb0e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47886,"size_decoded":4255,"mime_type":"text/css","magic":"ASCII text, with very long lines (46623)","md5":"177ff7e3310c02d7e6a139a3237e0d38","sha1":"375c1fac3912c4b63c01d7bc241aa43ed0055460","sha256":"db079d71523907889a19e611a38e528a3405d89d22506634a177248f03f93226","sha512":"004642aa9fe53920ff46cbaf93784da99051143c22aa04e4e24ce332e2556b057d331a481f31ff427dc0b5ef0cac013c55e41764af8496f59366278918044741","ssdeep":"768:KEkZgRUp2R7p2ROwo1OAPkuD336ya5hrCen0eTg:KEkZYwo1OAPkuD336ya5hrCen0eTg","tlshash":"9223b89a48a1224591234e56cbcc9fa8473cc76364b25cef33967c4bc745bad23ce617","first_seen":"2024-07-02T22:35:06Z","last_seen":"2026-09-17T19:26:12.323524Z","times_seen":851,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/favicon.ico","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.335Z","timestamp":1789616843335,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":13531,"size_decoded":3191,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"bcf23fadbcb599a2d8f4057f41130818","sha1":"26e846fd93fa9f24bc3e50c379b9bd5ce0c13f53","sha256":"4cd8754bd187afc15f659a47c38c465557193d6d9c90529046c585a39f087fe4","sha512":"ee84abf9a60282b386e0ec53d45f81d2b13f749f02e0d9772b2e4cbfe27eb2829d716118fb8cb47ef6a1a13f8105a34c43393d18a539fe9aae33bbef8b8097e2","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/mD02r/UL7DBfrJgiAQntyztM/Z0tYn+ahaOa0acaZ:vOZUEolDBjJyQntyztM/Z0tY8","tlshash":"03523b39d601619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8d5f8f38fd40627483","first_seen":"2026-09-16T20:22:35.844691Z","last_seen":"2026-09-17T19:26:12.301858Z","times_seen":8,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/theme3/tabbar/mine.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.778Z","timestamp":1789616844778,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/theme3/tabbar/mine.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/css/chunk-9c1c641c.e8c0cdcb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 4660\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-1234\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4660,"size_decoded":4900,"mime_type":"image/png","magic":"PNG image data, 138 x 134, 8-bit/color RGBA, non-interlaced","md5":"9257d7d41f0aeb65c674ea3ee19ef1b4","sha1":"826e3ae0ef20a7f48f69fd5740ff48212d05ecb0","sha256":"f4e0220e488ebe9e5176c587603b0756cc755a8649c13344aea8652d57cd5562","sha512":"e459264955355f76655df49a7ee28a76e31b84ebd37a8fcd2703d011b8eb29696ed01177dbf79758c952b29802b4afb7da894aa869b6e6c596f988764a444de0","ssdeep":"96:F9ICo03ee/GROo9AO7s0BPYx6GYWNHo6JxG/jgIZpEN25Vnj802NKo+pTp3p1:4L0uqrydGthNI6DOgIZzVnjj2NAp3p1","tlshash":"95a16e1391ede97e449c890166d2053db96b3bf0c68897f4149b2fdcd3b0e72b6810b8","first_seen":"2023-05-03T23:27:44Z","last_seen":"2026-09-17T19:26:12.302875Z","times_seen":527,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/api/poster/homeList","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.801Z","timestamp":1789616844801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"POST /api/poster/homeList HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: id\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://sundaeshower.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://sundaeshower.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":405,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-09-17T19:26:12.305541Z","times_seen":5433,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-7qvfe-lexrtkha1uwe2a","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.354Z","timestamp":1789616845354,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /file/sg-11134201-7qvfe-lexrtkha1uwe2a HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/7e3766dd56f69adf324de704d4cd9ad3","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.373Z","timestamp":1789616845373,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /file/7e3766dd56f69adf324de704d4cd9ad3 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/my-11134201-23020-l8ufjmxj23nv90","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.387Z","timestamp":1789616845387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/my-11134201-23020-l8ufjmxj23nv90 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93247\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"ebd75f7963e7459c3edcbae80de3e4e2\"\r\nx-mms-request-id: 8c208596c62144038a98a159b453e5db-6a9fa2ea\r\nx-ser: i2315767_c11460, i2289145_c27117\r\nx-cache: HIT from i2315767_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93247,"size_decoded":93675,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x800, components 3","md5":"ebd75f7963e7459c3edcbae80de3e4e2","sha1":"a65e10a0f78cc3c4b8520b71170417991271f6c1","sha256":"3f8f85a1a760970b43afade16e0cf06f478221ffa025c7484422496b8bd1fb92","sha512":"77926ecb840f3baac512915e890cf5fd5beac16d5d177a460bb0fc7dc39dd8540efc3e4dd7d544522d84c776a1f2b70c5082ab9e57ca1f26463eddf26e2cdc88","ssdeep":"1536:bko1oyFe4f4Vy63GxIIS1+0fR/bnKKUKCr27YcDPcwCV0U3Yyg2qQijiU:A+fs4fiy6WxIz1+0fh7KKUKCSccT9CVa","tlshash":"589302bc4c9993fcc40c1b79ea14b98341e4ae7efcdfa554a1415fa0b28e08747c996b","first_seen":"2026-01-18T13:44:15.626619Z","last_seen":"2026-09-17T03:48:08.885611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":261,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:47:19.548Z","timestamp":1789616839548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:20 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13531,"size_decoded":3191,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"bcf23fadbcb599a2d8f4057f41130818","sha1":"26e846fd93fa9f24bc3e50c379b9bd5ce0c13f53","sha256":"4cd8754bd187afc15f659a47c38c465557193d6d9c90529046c585a39f087fe4","sha512":"ee84abf9a60282b386e0ec53d45f81d2b13f749f02e0d9772b2e4cbfe27eb2829d716118fb8cb47ef6a1a13f8105a34c43393d18a539fe9aae33bbef8b8097e2","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/mD02r/UL7DBfrJgiAQntyztM/Z0tYn+ahaOa0acaZ:vOZUEolDBjJyQntyztM/Z0tY8","tlshash":"03523b39d601619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8d5f8f38fd40627483","first_seen":"2026-09-16T20:22:35.844691Z","last_seen":"2026-09-17T19:26:12.301858Z","times_seen":8,"resource_available":true,"data":null}},"time_used":994,"timings":{"blocked":0,"dns":3,"connect":249,"send":0,"wait":246,"receive":0,"ssl":496},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/static/customer/kf.png","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.794Z","timestamp":1789616844794,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /static/customer/kf.png HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 10556\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-293c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10556,"size_decoded":10797,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f7d80a98f6b59aaf05ab54c405bffe89","sha1":"db5cfc26f716a362d10f81633934d9f01c523ae7","sha256":"ab41101111ba6bf6ecb5ef0aa35ae339cb7b2f09517eff9914dd69c65271ee03","sha512":"03bc2ef07c105a6562ba3bce8a0040db8a5f5efba951a12d19bc2d42b3abdb16b1f20ceec2c789ba5614d3ad07e926ebf293edc66ffbaf92b867410085a3bb47","ssdeep":"192:qX/4hute4ReiK/MhLbtUNdZS5eYQOZj9TND1UQBIJg7G5bmVaGal3a:w7e4vKENEZS51N9T3UQsgS54cK","tlshash":"ee22bf736860bb28794b3ca93fc9d55109c5bd24cac3c214956a92617cbaa9037df0d5","first_seen":"2023-05-03T16:46:37Z","last_seen":"2026-09-17T19:26:12.296693Z","times_seen":850,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134201-7rbmz-llq31c4rsqqha7","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.357Z","timestamp":1789616845357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134201-7rbmz-llq31c4rsqqha7 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 213396\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"8d4017a4a63f869d6f960fb5ea6479d5\"\r\nx-mms-request-id: edfb32a8c49349358cdc19459782de9a-6aab62cd\r\nx-ser: i2315739_c11460, i2289153_c27117\r\nx-cache: MISS from i2289153_c27117(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":213396,"size_decoded":213826,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"8d4017a4a63f869d6f960fb5ea6479d5","sha1":"b8e70becb3501630b3aa5879079f82652f64a000","sha256":"f28269535dbb7c53a5bc581fb09280fa2392bd56b73b7023c0ea3295e7d08543","sha512":"b12c7defb5d4b652c8bb75fae529cb9fb232b648716deea9b1062e71a70744cec47e2f3dd49408b77d828a34478e053d492ab15adbe715d6bea30a1e98c867e2","ssdeep":"6144:8L4odmBl5UC32PNF3UcNG7uYXnSuyu5pg7PM7oCGcXozR:8HAl5UC32VNI7uYXnT4PMoCNXot","tlshash":"c7240267cc18894314b893adbf470e7c5a2a1f1de191bff606270ecfae646491c4a52e","first_seen":"2026-01-14T04:29:22.818221Z","last_seen":"2026-09-17T03:48:08.88739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":64,"connect":40,"send":0,"wait":350,"receive":33,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/tabbar/assets.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.409Z","timestamp":1789616845409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/tabbar/assets.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 17565\r\nLast-Modified: Wed, 16 Sep 2026 05:34:02 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa2a4a-449d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17565,"size_decoded":17806,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"f58533d3d8032a2ebee5b01e4f91ce56","sha1":"373a51128c8f99ac2371ef4b792b2994128091ea","sha256":"aabe3cb48a68fec28f801583b8f7a0e9ee2e893e07e7c792a979bad9ec9fe980","sha512":"7dc05b5ea1a70492d7c3c952b8321f02a103db4c2e69c8b58c546c65066ea8846cb92c183d6f4e9f6940224ab8d12808797460a6392dd7d188e584dd3c447569","ssdeep":"384:F0wD4mqGePGw/4elj5VB4Od1jXkl41jhBjBQYce1n3jZV:FXPw/r94O/4412ReB3jb","tlshash":"7f72e1c278618dea2e860738583fd202e31fe1ecd452ba56846bc20751ecf9d9df54a8","first_seen":"2025-03-03T23:57:52.23244Z","last_seen":"2026-09-17T19:26:12.315694Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":857,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.936Z","timestamp":1789616840936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.4/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 499\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 03 Aug 2021 11:06:04 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N09Gqm58TpCjyaeEADpj6%2BksJHqggI%2FSm2UszoJn%2BHcaydz63KmZm60SbQiqftos47J%2FR8q57QDnE0Uxlck7iOLBnL3syfm4A9SMH82Y6Z21cZJ7RxckO0KefjAOdcfMw5UaBfVN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9ca1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":585656,"size_decoded":122709,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"c51f03d35129d9d1a9da65b24cef7fa7","sha1":"1e1d550d978378980dc3aeb60012da86c2355c4b","sha256":"339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c","sha512":"8c83157d1a2d4bacafc89ed01d444551151772f1119272c303ace71aa12b6f1fba29da8c9597e2a9baf670c93768286a405a70186b92ba5aae84554b9123c1eb","ssdeep":"6144:K4lrdS1Vqp5xb+XzxEXdUfM2Z0a54VXTnDBHiSuLx8isMZg07LQi:7vS1Mp5xb+XzxEXufM2DEDVHDub7LQi","tlshash":"04c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2024-03-05T16:56:16Z","last_seen":"2026-09-17T19:26:12.29611Z","times_seen":912,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://sundaeshower.com/api/websocket/server/398/l5jhq5xu/websocket","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.316Z","timestamp":1789616843316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /api/websocket/server/398/l5jhq5xu/websocket HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://sundaeshower.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FCrUARW3i1RiL0WkmL8PUw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:24 GMT\r\nConnection: upgrade\r\nOrigin: https://sundaeshower.com\r\nUpgrade: WebSocket\r\nSec-WebSocket-Accept: p+vjXo8M+/oWNmwiwTLp0lNFAAI=\r\nAccess-Control-Allow-Origin: https://sundaeshower.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nSec-WebSocket-Location: ws://sundaeshower.com/websocket/server//398/l5jhq5xu/websocket\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":482,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T23:41:52.708065Z","times_seen":18524522,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":285,"send":0,"wait":286,"receive":0,"ssl":572},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/theme3/tabbar/home-sel.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.408Z","timestamp":1789616845408,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/theme3/tabbar/home-sel.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 678\r\nLast-Modified: Wed, 16 Sep 2026 05:34:02 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa2a4a-2a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":678,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"77799daa36d79f46d4b281b47653ed1b","sha1":"55373be89e5b80041a0498a720e73db384b30236","sha256":"72587bba2c08d4d3224cfd5c5be4be51b84741142696938d00361e372d2c8813","sha512":"eae2e0e6d68a4b7e1542cd846aa3fb78cb007b0a62f860425bfb544b1c89c9d34eec213d2a344353a0dc30521f4d529edb983f7b4d2c1acfcd1e54cbf7fec813","ssdeep":"","tlshash":"43018393f30668269ea14ee7c33f9178e088c99715e864696a82843d1370ba8f52d267","first_seen":"2025-03-03T23:57:52.309985Z","last_seen":"2026-09-17T19:26:12.297945Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/banner/202609/16/a339240744a64ce387ebe351869f41aa_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.410Z","timestamp":1789616845410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/banner/202609/16/a339240744a64ce387ebe351869f41aa_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16404\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 16 Sep 2026 04:36:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16404,"size_decoded":16700,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3","md5":"392aeed0b81bc2c435c87f87d3da855d","sha1":"5970d88c9f091457d36728a0c4a43078b9574814","sha256":"ea7ed5eb95fe2621bdbe4960c33d9f9b5cc03caf95452300c7f2caf8dadabc64","sha512":"8079650cc3346ea1ed64c4fa698ad7da323311201fd01b855a19871a665600ebfff5b1e7960e38293e2f53492147cb6c2c2244f55e0c3f78c442ad0f47564fd3","ssdeep":"384:ohglRqBaf/wcA4ffHXPqARt1fiJVB45O9T0KY:ohglRgn4ffHXPtfiJZDY","tlshash":"3c72d1369f98a0adc6774ef7a372db635681fabb0a500251d1211cc809f2b887ff24d4","first_seen":"2026-09-17T03:39:54.308434Z","last_seen":"2026-09-17T19:26:12.298412Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":884,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-vendors.42f07336.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.921Z","timestamp":1789616840921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /js/chunk-vendors.42f07336.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-10000\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65536,"size_decoded":19014,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29775)","md5":"bdaaed4e9e1d5e0322ea968e6f47ac0c","sha1":"85c58af8151ed5badcdca952295e8c6e7b3e1e15","sha256":"c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8","sha512":"e23c153981e588a4d6b99c8341da319ce7e9bb16036ff952a8a469910640505b6e7ee7bb9e6d06dc59082f537053bb46cc8d800b82de8a730abee7d743bf03d5","ssdeep":"1536:qJuH03+0goh0dbU2Q+39Ya7C5x+eccVdofh3q4A6R:qJuU3bCbU2Q+3MXccgpE6R","tlshash":"0553e788f2d5b070439771a8402f610bf37ae959b44d8498f625e8e1bdb8dce546bf38","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-09-17T19:26:12.320699Z","times_seen":893,"resource_available":true,"data":null}},"time_used":1428,"timings":{"blocked":-1,"dns":0,"connect":284,"send":0,"wait":571,"receive":0,"ssl":573},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/lib/jquery-1.11.2.min.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.922Z","timestamp":1789616840922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:21 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-1787e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96382,"size_decoded":33746,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.310081Z","times_seen":1975,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":458,"dns":0,"connect":0,"send":0,"wait":251,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.934Z","timestamp":1789616840934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1076\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TK4TUXBnq4XjAunkswZUaCX4WJVnCeeYvqe%2FKMJyxpdqbfCcj%2BZksWsQmjHA3sEw85UTmdm3eCjbraIyO4it3vGRIuPFrONzRLL%2B1QmxaDdubP1hS77LRu8IgHRlKqlipXHEBkfI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24822,"size_decoded":8884,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.322979Z","times_seen":1278,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/css/chunk-3f5c92ef.7bbca7ad.css","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.875Z","timestamp":1789616843875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /css/chunk-3f5c92ef.7bbca7ad.css HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-410a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16650,"size_decoded":2881,"mime_type":"text/css","magic":"ASCII text, with very long lines (16650), with no line terminators","md5":"d1e08f787dfccc01b9615b62e6e22561","sha1":"401149d0bbc9fe9dcbb23a8e00093253cd2195af","sha256":"050333df1d037cd1fcbffa9b06ef9d6cafd22b9d2c012f17f455174dbdc9f3ad","sha512":"42314fbc6873d9b2b314612afdd6c9d15e14a6f239bf907519f684cda1bc81656e43989a294829d390cca86e4a30adedb4bdaa92f50c92fd16a3c2d70a8ca7d7","ssdeep":"192:DDXXnHjXTdlUvHdYrpMG2zIlYlpTkvQ8jF20ROlQlyuB7eeUJpH/Il/lQlAZKb:DDX3HjDwfy0kvQ8jmQBDUzHCDZKb","tlshash":"f5727737646c1328f0bbdf206a6c6b9c92a6e133e34113a959027e34cfcb9da15765cd","first_seen":"2026-09-07T00:31:18.80252Z","last_seen":"2026-09-17T19:26:12.324067Z","times_seen":23,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/cfg/202609/15/90d81f9d956a48d296d71d17d0239677_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:24.225Z","timestamp":1789616844225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/cfg/202609/15/90d81f9d956a48d296d71d17d0239677_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43213\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 15 Sep 2026 16:28:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43213,"size_decoded":43509,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x840, components 3","md5":"cc520e12405d6b1785f37ed2e742f865","sha1":"34f72f8c2260ac536119c37817215e1af3a7e385","sha256":"8d19ea6da196d7f7d2ff25009e182a4c651e21cbe56896304ebacf29a283ff4f","sha512":"da5627f62e63550dee2652f274c88592a1e398512720bfc81e01d4c2c31c468a3acffd9b5d07ca47108ffd4d014576fb0e8b15570042792b35b4918e34f5d50c","ssdeep":"768:Nhaq4ySDeEcddqI3InzuMmfh/KVZo99GmlrDNjij7xMfh4PCpTnQZK:PVaevdKNmpCVKqm1DNefxyh46QZK","tlshash":"1f13e112d75bc68fe676277265e38b3db7d63458c2cc0e63ab580c6839bb3042f56140","first_seen":"2026-09-16T20:22:35.85275Z","last_seen":"2026-09-17T19:26:12.301145Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2044,"timings":{"blocked":0,"dns":347,"connect":282,"send":0,"wait":565,"receive":282,"ssl":567},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/api//file/banner/202609/13/76a11484383d4eecbda4127bb38a6e2d_.jpg","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.065Z","timestamp":1789616845065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /api//file/banner/202609/13/76a11484383d4eecbda4127bb38a6e2d_.jpg HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 152892\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Sun, 13 Sep 2026 06:08:37 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152892,"size_decoded":153189,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x480, components 3","md5":"4201f09eeba74fe3900d24912fbe17de","sha1":"ec881ae8948ae1fd22cae2b73e558dd9cb7e5b02","sha256":"4afd271de2d15e116f5506cca1eda34d35bf070a3f7666a79f38f5f6ee541aa0","sha512":"6b520d4e47ce2b56670363f002bcca9681935cd46ff83392d2cce4a8abe289d1577a18a76c432937088ecccadc189fcdc6418cd2ee74614bbbe1414122ea535e","ssdeep":"3072:Uua4FVQ6koxtpx0Jgp9IJRc+H/kvjQkzG7XHj9R0ALUvYEyMZ0Rbp+DOMb:K4w6kox7x5ac+cvjQkzG7XHjPujTUbsb","tlshash":"83e313606b2e8a2aea5d822b0379b39543b53c7ff50d5b1d084178963cde7be2d500a3","first_seen":"2026-09-13T08:11:49.80106Z","last_seen":"2026-09-17T19:26:12.326944Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":1,"dns":0,"connect":246,"send":0,"wait":491,"receive":493,"ssl":504},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"modernremotely.com/static/mobile/link/4.png","fqdn":"modernremotely.com","domain":"modernremotely.com","tld":"com"},"ip":{"addr":"182.16.78.67","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.289Z","timestamp":1789616845289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"modernremotely.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 23:21:18 GMT","end":"Mon, 19 Oct 2026 23:21:17 GMT"},"fingerprint":{"sha1":"4F:F1:1C:6B:1B:D5:33:7F:E9:25:23:D2:12:C8:5E:02:E2:79:B0:96","sha256":"75:FB:75:E3:1A:06:BE:8F:8F:1E:A5:01:30:59:B6:50:BD:06:CA:52:D9:FB:29:52:71:1C:56:4D:45:AA:0B:AD"}}},"request":{"raw":"GET /static/mobile/link/4.png HTTP/1.1\r\nHost: modernremotely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 6495\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nConnection: keep-alive\r\nETag: \"6aaa29fe-195f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6495,"size_decoded":6735,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"f8f831ea05790e70229847bdded8073e","sha1":"10cb798a5a3b8a15f053cf23617f908982dc8651","sha256":"60f0bef1d94953c9a8d6e3ddb33b2ded547e7d5e69a90abddb580bf00ae3d697","sha512":"9ef376f939402c860a63328c057d0e4c818a9eacd6f6c272aa0800c35aa364136d40369c2eb61a76b558646f738fd0b0a507a89e76428442c9c184cf92f11805","ssdeep":"192:PSX6knOHiJNWjegyM6ka35WqlBNVsr79S9p5tYhqctjle:6XJnOHeNuezMsWqUgf7YhqctZe","tlshash":"35d17d07dc4a6d10fb2ae81679e872474ef703d4199768946daa48c6fdf033ecc298c1","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-09-17T19:26:12.309558Z","times_seen":347,"resource_available":false,"data":null}},"time_used":1692,"timings":{"blocked":1449,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"modernremotely.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"modernremotely.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/my-11134201-7qul3-lgpaljlpy9bhc0","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.394Z","timestamp":1789616845394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/my-11134201-7qul3-lgpaljlpy9bhc0 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 344943\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"07e2c64c8934f38c58d8069b2a005700\"\r\nx-mms-request-id: 314642985b864cf5abb5d5371fba5613-6aab6185\r\nx-ser: i2315741_c11460, i2289103_c27117\r\nx-cache: HIT from i2315741_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":344943,"size_decoded":345372,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x800, components 3","md5":"07e2c64c8934f38c58d8069b2a005700","sha1":"71f0ee32e86aa5e6e9d0b4ee7e7b27471478cabe","sha256":"500b076994bb8d64d95ca39c2853109d2b6bfae05ba374486d5ab8403285a530","sha512":"53bdb50d1fd6f8823116bdb6be8f9d2a144842fadefe875d6228c41bff5ec5a7c34c8af7aefb57ed54d0ec8e3870d7318ab379ac49a00765d2e71a36fce131fc","ssdeep":"6144:k3G0lU4knTMRatY0qKCkcIFxJGQqISfi1Q2jbw5PilBZsKJIbg4i+:w6T2atVtcIjwnIJ1Q2/UwBug47","tlshash":"74741265648964258d4e8722c8f0f12f1ba22fa646edf91c37758e42f7ef1947ce808d","first_seen":"2025-04-19T12:22:19.432746Z","last_seen":"2026-09-17T03:48:08.894543Z","times_seen":5,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":179,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.927Z","timestamp":1789616840927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 823\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9I0cji%2FA9o2X2TA91TkvY3%2B7kJ2Jby0CU3jr%2BtH2oWcrHg9zfEeeQipLqy%2Bwh8d0xTD9i75gffUO2xY8OTntIkDkgVubbS6aTcMu9FVDppzlN0q3%2BWD1USDlHigUuVGeetnf4Oj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9c61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30769\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93675,"size_decoded":31788,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-09-17T19:26:12.300069Z","times_seen":4674,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:20.937Z","timestamp":1789616840937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 11917\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5M8kDHBFrZX6xuMXpPGYjNwTsfyYsc97vrxqiMAb2SdpHLAFi%2FxAONxzdYfWB2O2fB%2Fu%2BzUAzwAzcfcrENPxIPEo9P1D6rc7Yb18fff1swcPuhn2D40FO2HIMW%2BMhIxTPpbJPBOR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c52107d9cb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28993\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128745,"size_decoded":30012,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-09-17T19:26:12.325303Z","times_seen":2560,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sundaeshower.com/js/chunk-06ae24a4.686330fb.js","fqdn":"sundaeshower.com","domain":"sundaeshower.com","tld":"com"},"ip":{"addr":"182.16.78.69","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:23.024Z","timestamp":1789616843024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sundaeshower.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 22:09:07 GMT","end":"Sat, 31 Oct 2026 22:09:06 GMT"},"fingerprint":{"sha1":"E5:4A:D6:9C:37:FB:74:2E:97:01:4C:74:9C:21:23:92:D1:76:08:B1","sha256":"B6:A3:A9:2C:78:A5:F6:D2:F4:A3:B7:0D:BA:49:EF:49:EC:E7:8C:A4:C1:BE:E6:E0:43:70:E8:2A:24:D4:43:9C"}}},"request":{"raw":"GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1\r\nHost: sundaeshower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 17 Sep 2026 03:47:23 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 16 Sep 2026 05:32:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aaa29fe-81\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129,"size_decoded":397,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"676e3a2df47d8e40c29c2d1a67127eec","sha1":"e54e8144ef939162c151a843933a98ff020a2641","sha256":"6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4","sha512":"4314d28a687dba60202a2a5974ea1b39b02a45a2fea359503396553b4bf9c1eebcc4168357fe2e43875ddd2e61c2af72b926ee6a61bc978fae9474a77de421bb","ssdeep":"","tlshash":"c0b02bbe2804790808bfa0e4300b33d8048301003f711ce507b020902b74e8e4303a4b","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-09-17T19:26:12.304921Z","times_seen":929,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"sundaeshower.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"sundaeshower.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-7qvdg-lhefd8wx70yk5f","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.397Z","timestamp":1789616845397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134207-7qvdg-lhefd8wx70yk5f HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:26 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 156092\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"3176bb5ed2e7181ef30306dba2ac0f28\"\r\nx-mms-request-id: 6a4091fc0f3c4e63a3f9395c0957c76b-6a9cdc46\r\nx-ser: i1935883_c11272, i2289153_c27117\r\nx-cache: HIT from i1935883_c11272(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156092,"size_decoded":156535,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"3176bb5ed2e7181ef30306dba2ac0f28","sha1":"78a7cca8578385e63b9315f1701c371fb254c553","sha256":"8a7de7551585a641c470b4c159eedad6b8d4d8eb8ccc4bf609c682d1d6a0c0cc","sha512":"32291c5e3e42892a235bc2e0a3f2b64140bf564d4ae82bfd0c1dad8c979e0620033256ebac447f85c72962434cc586d2eb44ec69777c3aa36703e598d1c4e502","ssdeep":"3072:w4wR9CrQxq3EBBal4M+4iAJ8T7eaLQhpROYUezPcjoN:vK9CrQxuEBBalNRWeamR7PcUN","tlshash":"94e3126af5579436e6a53e3cec9c8610060c05f528f9c61e742c8cd7eff5a4b42b688b","first_seen":"2026-01-06T21:28:54.423925Z","last_seen":"2026-09-17T03:48:08.897335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":349,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-7rbl9-lmyzaf4ydik909","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.398Z","timestamp":1789616845398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134207-7rbl9-lmyzaf4ydik909 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 177729\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"df9b9a9d3f546f74341296244d566cc1\"\r\nx-mms-request-id: 2c0369f8f7ae4ec8adfbfabe5683a389-6aa0d048\r\nx-ser: i1935883_c11272, i2289075_c27117\r\nx-cache: HIT from i1935883_c11272(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":177729,"size_decoded":178172,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 945x945, components 3","md5":"df9b9a9d3f546f74341296244d566cc1","sha1":"00a7627a744967f6605ea2860c3b73fc3da5c87a","sha256":"d838eb9d4118a2e537a6d68c6035dfc25fbeecebe8aaaa5900d2434178aee5e5","sha512":"d66267804c81437d9bc812617edcc934e506228238e9726f520a05162c3aee1102b7a1b9e69fea9356135835df52c0d6276072e7fae40786980e8ce6844d0fe7","ssdeep":"3072:TL5pO1ZF/UuUYccLbP0G1JIt37HxW8VjtEvFzXS2cWe8i+7AG4ZL5cPvAvFOUB2Q:TtpO1ZFsB6z0gJsDA04BDcWfJyB5cPIf","tlshash":"6704f1460edc2e42e597e9525d8b4808989b8eccbfb46390d99e6d85c4fd24b6c23c4f","first_seen":"2026-01-17T10:28:09.982266Z","last_seen":"2026-09-17T03:48:08.898844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":326,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-23010-kdi0lgt7dzlve6","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.399Z","timestamp":1789616845399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134207-23010-kdi0lgt7dzlve6 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 395457\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"f8d4f2819bc9657d05268bd4646b51d8\"\r\nx-mms-request-id: a1d9964e9f034949834e7d8793f0fa1c-6a9d5339\r\nx-ser: i2315825_c11460, i2289153_c27117\r\nx-cache: HIT from i2315825_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":395457,"size_decoded":395886,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 848x848, components 3","md5":"f8d4f2819bc9657d05268bd4646b51d8","sha1":"8a12337d2ab0a2a557f6fd82f3039247f3ed09e3","sha256":"a2c21a3365ed0287f8d27e70567a16e6a166b373f8266531746d0b34d0668dad","sha512":"3da9f49f687779e426595d9cb2e1dd1979f5945c6016e28b8b6f1550937e7e6808f557abe93ec2b3fd15cd7d2b8be93827b08b9ad5ddf4d4de9e6f33216abb6b","ssdeep":"6144:x8Mc/MEBevQd+UJCm2Cb4xBV2NNWxXv9NNFgzkmPS/0wu+Nmol3me:0/MEBe7UJCm+mNc9lGkd/0WNjj","tlshash":"2a84027107f0e455810568b1988d8bb5ab32fb9759d2097f28f42fce71a29c2d87731b","first_seen":"2026-02-23T12:45:36.923736Z","last_seen":"2026-09-17T03:48:08.900187Z","times_seen":4,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":349,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/sg-11134207-7qvfe-lk3fbvxgmmr8e9","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.400Z","timestamp":1789616845400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/sg-11134207-7qvfe-lk3fbvxgmmr8e9 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:25 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 203737\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"5890162c102619e8fb0703eb8a45b368\"\r\nx-mms-request-id: 25cf21b008f1494cba22be1ab4dbb77b-6aa9fc47\r\nx-ser: i2315827_c11460, i2289167_c27117\r\nx-cache: HIT from i2315827_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":203737,"size_decoded":204180,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x800, components 3","md5":"5890162c102619e8fb0703eb8a45b368","sha1":"11511064dbf98c6b89b7b9cc7df8a08f9af670ae","sha256":"d1c9796d5543eceefc53097c90119dbfb810d17d5c62e54aa319c16d1381568f","sha512":"fcc27d5b0ea3c91461d7c6a71f6944aa72d38f5033decca47c82af560c496093fbae62eecce9250e3ca92c9da86cefbaaee64b1deef02c32c6a348ca3a0a8077","ssdeep":"6144:n84OcS/GF6LG6gd9VS3z1y8eqXHlXIttB1FwOzG:n84jS/GFuG03zXXHeNjG","tlshash":"f214123aff522244fc3b69f385a8c3a01e7b522d6749de00c75b15b4cb02ad846ead75","first_seen":"2024-08-19T15:17:19.069099Z","last_seen":"2026-09-17T03:48:08.901406Z","times_seen":3,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":326,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/tw-11134207-7qul9-lk6e5vw2xsgdc6","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.403Z","timestamp":1789616845403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/tw-11134207-7qul9-lk6e5vw2xsgdc6 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:26 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 317320\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"66e4112e048c48063e247fc48d542229\"\r\nx-mms-request-id: 11b47072024c46c09e10e10c2540050e-6aab62cd\r\nx-ser: i2315855_c11460, i2289153_c27117\r\nx-cache: MISS from i2289153_c27117(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":317320,"size_decoded":317764,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3","md5":"66e4112e048c48063e247fc48d542229","sha1":"12a048ef2a3819527ad59093b97d96e71ab763e8","sha256":"308282a77faa84cceab98747263f5dfc69f395611db0cfd0be98eb78fadcc7db","sha512":"3502322728879c1ee59b470caa4d4d1c760a2d37259c44b1cbc4c9ba1e19ec504b36d7f944bba99b0885bb66c8fc45dfec731f9430d487dcbe455e368c79b92a","ssdeep":"6144:W2H9dSS2XuEGnyAj94/G3lBTWEiDOVb6RdLB5a2noRmdLxSL:W2ddBS0yAjG/E0L/a2no+LYL","tlshash":"9464f073d7e94d5a9bb8db219489e448f2764b1c3d962a051a08347eecf3d8cb4938c7","first_seen":"2026-01-12T16:03:19.711014Z","last_seen":"2026-09-17T03:48:08.90284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":363,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"down-sg.img.susercontent.com/file/72684dc1d87471d411a9cf7e614e6662","fqdn":"down-sg.img.susercontent.com","domain":"susercontent.com","tld":"com"},"ip":{"addr":"154.85.94.35","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sundaeshower.com/","date":"2026-09-17T03:47:25.401Z","timestamp":1789616845401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.img.susercontent.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 May 2026 11:16:29 GMT","end":"Fri, 27 Nov 2026 11:16:29 GMT"},"fingerprint":{"sha1":"F7:B9:B3:8A:57:9E:0B:28:0D:21:F0:AB:19:4A:02:79:57:DC:E0:32","sha256":"E2:92:F7:B9:C9:B9:A4:A9:49:3D:48:1B:25:FD:25:A0:01:ED:F8:77:D6:B7:67:72:F3:CE:22:08:CE:3C:73:8F"}}},"request":{"raw":"GET /file/72684dc1d87471d411a9cf7e614e6662 HTTP/1.1\r\nHost: down-sg.img.susercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sundaeshower.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:47:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 187237\r\nserver: SGW\r\ncache-control: max-age=15552000\r\netag: \"72684dc1d87471d411a9cf7e614e6662\"\r\nx-mms-request-id: 48ab83509d1c47c0a74b986018db82cc-6aa54ea5\r\nx-ser: i1911849_c11460, i2289167_c27117\r\nx-cache: HIT from i1911849_c11460(cloudsvr)\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-cdn: baishan\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187237,"size_decoded":187666,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"72684dc1d87471d411a9cf7e614e6662","sha1":"97fae28bb65bb530dc9b70588059e34a6d646d29","sha256":"33514a130d5e1cb8756a1c79df964bec253550d9f5a85446669847eed3302bb1","sha512":"f2118a11ff5db9220942af621e89c68c27a8938509fe25997f4f4a698d43e68d042a0817cef80f7cd5e2bad1d04710d60b29df7aad964acbc13071f94d9c2036","ssdeep":"3072:coh6+cg/xt/sW6fAkenSrlVop9N0GTXbkyj/0iIm7vrNOqlzsJ17Ww9UQF5hzB:Nh6mkAkoSxyp0mXoyj//hrNOqFs/hFf1","tlshash":"2404d0578849c753a12c87b8be031eac2f193b1df8867aff11564ddb7e682614c8d06e","first_seen":"2026-06-16T14:28:40.941182Z","last_seen":"2026-09-17T03:48:08.904532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":326,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}