{"report_id":"8ce0660a-91a7-4618-94c8-24ad6e2de072","version":0,"status":"done","tags":[],"date":"2026-06-27T00:21:52Z","url":{"schema":"http","addr":"m.hxyl03.com","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":0,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"m.hxyl03.com/","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"title":"华信娱乐免费下载-华信娱乐app下载2026最新版v7.15.13 安卓版","dom":{"size":8590,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"faab99d65618947a51542b8593ea6c18","sha1":"30b445783de44f0f80476d9cb1430e4339fa5a6e","sha256":"3d5e627018529d28bb7b79c1ac291fb49e3bbc90f91e9e3f922dab53c0ca229e","sha512":"baf3a2c696d4a3cb22cd8fde18a83bae7d35150ec5ba1fa656eae4275d037b755fa20c42a631da95d5731a31cc46b320d50175e6fa3bb9018a5fec0038798298","ssdeep":"192:7/drnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sAAtg:76jmX7AAtg","tlshash":"2202852661d3115b2822d1a66ff3171b6664d507c20bc9a97ecc16cdef89ac9c8a738c","dom_hash":"domhash68151781dee7f7d6b79191cedd0be75b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.hxyl03.com","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":0,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T00:21:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"154.204.28.51","ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":195677,"sent_data":4985,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-06-23T11:46:17.810732Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.hxyl03.com","ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":23,"request_count":23,"received_data":1884994,"sent_data":11410,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.hxyl03.com/","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e534a5cbd2df3aaed4e2bb405780d2a7","sha1":"bd4ac483c7629ef832aaa724291e5f3c97013e14","sha256":"4df2c5608d78458b37f68c0612223902a6b6ea8d31ff8124ed0eff7589fc03be","sha512":"4a5e434560cf6e8e9c071dd0cc5e8c2442dafdfbcba638c0c7e90bdc5a74deee42bbd2a2a1b7452addb1a807443c6c4db4eb30e1cb2629ebe39320e9c7d36662","ssdeep":"","tlshash":"d4f0dcae9c51e178abc338ac9bafda88c16e1026110ecc03a9d9c5ce3c38fc8042134c","size":492,"data":"","first_seen":"2025-05-26T01:34:30.601443Z","last_seen":"2026-07-22T12:25:41.183084Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/js/link.js","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4564c9abd2ffee12e85babb30fb496b","sha1":"7ef21312cf4a7b233576fc5b068c54a28fb0285c","sha256":"565d3f9ba3f97075eb514b9fc2da0d669800ed5d7979cded4733f3a0f374b515","sha512":"fa8c6ab8a5087540ca346d26e4aeed39c8753df68f5633610da246665208a41a4246404f2844e749c0d4fbbaf2242f54d2f1a09f20055d2528322f6925b2b33f","ssdeep":"","tlshash":"2231c058e6d038271d274867695b2c04b593500f7c0aec02f69d4ac0efb272e4b7ace4","size":1731,"data":"","first_seen":"2026-06-26T21:41:32.449574Z","last_seen":"2026-06-27T02:04:23.889619Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/e/dongpo/tz/tz.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"be23d989b6de57148420c4b1329427f0","sha1":"b7884c3c223703008a279c5a9786e0e565f8b7e6","sha256":"bc478cb619ef0c3c236feaba5a05298298ec580f89bd69129411b301e51c2aad","sha512":"66746717db495ae73828b416bb27fd6a94aec36c70d19c5b4f972f194f2b44207b623945b591f3228bdb722162a5f8e15d93106ebdd2d1459ca81947d5e2d591","ssdeep":"","tlshash":"06218c7fae630250d01691592bba676c3e3a001b6301cc307afcbe685f42f429447bd4","size":1158,"data":"","first_seen":"2026-06-08T23:21:23.191364Z","last_seen":"2026-07-01T01:07:48.715384Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-22T12:47:44.19101Z","times_seen":2719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-22T12:47:44.191588Z","times_seen":5470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/js/home.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-22T12:47:44.200731Z","times_seen":1305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/e/dongpo/tz/tj.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","size":808,"data":"","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-22T12:25:41.161737Z","times_seen":840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"m.hxyl03.com/e/dongpo/tz/tz.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.812Z","timestamp":1782519681812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jun 2026 12:04:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2952b0-486\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1158,"size_decoded":850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"be23d989b6de57148420c4b1329427f0","sha1":"b7884c3c223703008a279c5a9786e0e565f8b7e6","sha256":"bc478cb619ef0c3c236feaba5a05298298ec580f89bd69129411b301e51c2aad","sha512":"66746717db495ae73828b416bb27fd6a94aec36c70d19c5b4f972f194f2b44207b623945b591f3228bdb722162a5f8e15d93106ebdd2d1459ca81947d5e2d591","ssdeep":"","tlshash":"06218c7fae630250d01691592bba676c3e3a001b6301cc307afcbe685f42f429447bd4","first_seen":"2026-06-08T23:21:23.191364Z","last_seen":"2026-07-01T01:07:48.715384Z","times_seen":57,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/logo/mhxyl03com/logo.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.826Z","timestamp":1782519681826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/logo/mhxyl03com/logo.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4234\r\nlast-modified: Mon, 04 May 2026 19:14:12 GMT\r\netag: \"69f8f004-108a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4234,"size_decoded":4505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ae9e72606e04e5b2270a58d9fe94890f","sha1":"9447edd729a91efc118230878010d68d6672cb3d","sha256":"ad68729ad91eaa82f73f4943bcf3693d15a2ce5e6c85655a573f8a68def38abf","sha512":"b394da4d58874505fb07506e71a43a9cbdfa5031a90f271666c2ffd0e2258e568c3a34e8f27eb71cc2b14c94b2e621298073910bdee71da90d9d89f778e3541d","ssdeep":"96:IgKhgxDUlYfBFMT/VneNag9gQ89x14GsBtYmVQ/R1SVPuFG:IgKh+UifBY/Neag9gfsBtG/HWGM","tlshash":"5d915d306eb408e262d6a7b9282665950725a9440ca758b20df2932fbd205a8b2b750a","first_seen":"2026-06-27T00:21:58.205075Z","last_seen":"2026-06-27T02:04:23.86544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/departments4-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.836Z","timestamp":1782519681836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/departments4-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98420\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-18074\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98420,"size_decoded":98693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 746x497, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36a526a4e3cb72383670037a30ecfe01","sha1":"d16eb3ac696ffac9a6e84f980b2a6cdbb5c77f98","sha256":"bc6318d448c9dbc71c7b273f52ec2439dcb9a329a51efb018d382b5346496865","sha512":"34449290896324022256d69914e4b140551eaaec58bee17c6a6257a90a88799d1daecf2293d93c635651e943c52bfe82c8f3481f1341969edb7c7d3394a6c7f7","ssdeep":"3072:AZzi+AJ6cPaPvLZpsJuzr/7OpStuizlE9ZenFMlO2o:AZHzLZaJuzr0izl6Z4Fz2o","tlshash":"b6a312277819547300276f3afe52176cf007a6499f72d1190aa10de73bd2a8b274fba6","first_seen":"2026-06-27T00:21:58.206411Z","last_seen":"2026-06-27T02:04:23.883614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/departments5-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.839Z","timestamp":1782519681839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/departments5-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 157958\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-26906\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157958,"size_decoded":158232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 742x540, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c0b5101df3494368080d8ad8a0eeebe","sha1":"cfdc9aaf0f07c04aeeed9906e237932b51be42c3","sha256":"fc43eb5793bfdf503f2ce62239005f285a4f0712ff81affce495e27c286816bd","sha512":"e9eaf64d417cee4aff769ea209f82345592dc341872767533e60a438194db069f9ac4131bb7db90f4a290b9f37ade0155056d61117c3c2baf05259a5870a39f3","ssdeep":"3072:i7/i9dKDKp5xw/qHaOOquggulTIbGQlxemh+G2hyFnsbnNK:u6L/xjOquggYUbGQ/V2h/E","tlshash":"2af3128952c687f44587a64c9cb43d6ad7102eaec4a41aad8d7870032bf66f7833dc76","first_seen":"2026-06-27T00:21:58.207376Z","last_seen":"2026-06-27T02:04:23.89123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":789,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T00:21:19.849Z","timestamp":1782519679849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":20119,"size_decoded":6164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14892), with no line terminators","md5":"95638c1490503d0db8b2376adfb73954","sha1":"fb2b54f474ddec8e9d1cca64430bc5e00eb530d5","sha256":"4a0569cf40d891f9baca9eeffb40296766e5b5f208b4a4196dbd267a07dd5277","sha512":"ba93e281a82f7f44a7d76d1fc2227f99367b0216651494e43515c5e370adb14f14874d80dbc8f73d983b913e0bbd65552745d957e90d1d0d2e6c178d27fef5e7","ssdeep":"192:zTYTlBON6Tm7b9tjD1avsKTxG76HbVb2GcLQZ+3YLFs65uJBNAyD75xM2fmBzQim:zTYTrBTqfjDLyJKFNLDHM5E9TGMh","tlshash":"7b829332b041352b0677cef8be64734d70e7825ec977a8c27af96bc40bc6d664462a47","first_seen":"2026-06-27T00:21:58.208267Z","last_seen":"2026-06-27T02:04:23.904602Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1662,"timings":{"blocked":-1,"dns":353,"connect":262,"send":0,"wait":517,"receive":0,"ssl":530},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.817Z","timestamp":1782519681817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Apr 2026 01:10:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e23-22512\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140562,"size_decoded":39953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-22T12:47:44.191588Z","times_seen":5470,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/app1-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.841Z","timestamp":1782519681841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/app1-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 139596\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-2214c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139596,"size_decoded":139870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 650x464, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"154aac6c284202190efdcee903cdf789","sha1":"55acf60821abb30a05b67c095e9cd3874ee9c7de","sha256":"1ef6fd7276b0d11d48a6722ff9e41c66bfb0055da3664f0d2c6c963d29eeb433","sha512":"9297da40bc7944bdc5d574e5e86705cbeab4589df855a640f2819a9ce9d0925692b17a4e199d676a22565a548919760be08b8c39e95c8cc69ede1a74828ef93f","ssdeep":"3072:2mxcj7HY2TIR/zMSPiOCDD9UTUWZdiD0tqzuMtEjmPS:z8HY2TIFzMSPADDCIWZY0tqzu4Ejp","tlshash":"0fd312371bd039f490b22db0bd4c68bde77bf0dc951ea14fd5029984989a93e094be31","first_seen":"2026-06-27T00:21:58.210421Z","last_seen":"2026-06-27T02:04:23.900287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":789,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/wnspc.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.994Z","timestamp":1782519683994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/wnspc.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-1eb7\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7863,"size_decoded":8238,"mime_type":"image/png","magic":"PNG image data, 172 x 60, 8-bit/color RGBA, non-interlaced","md5":"6e6f3e6c749737e6c347ec25d39b3eb1","sha1":"076c805bf394c7996a58202e333827837c8b1378","sha256":"391138ddf53bc321563b3d17fe0f37f5b40efba65fc661dbfa239a2b2184ec65","sha512":"b4621a8e30b49a48b1b13e9582c260b02d42ab2cc2509d59e56cf85028eec3dd165e255dff5c61e689ad8b4eaabe74852185efb2764da5c0ec1133a2ccb02a3d","ssdeep":"192:FQSFq7yL2y34yuuSzYUfBY2kCf9pDnA3+O07Zu86U9S0aN:zFjLX3u1YU5sCzA3hEu86sSLN","tlshash":"26f1ae6b1553fcb469dda7e92063af6082136f48b0077a12fb2b29748135fe5f44aa13","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-07-22T12:25:41.158499Z","times_seen":942,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/tycpc.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.995Z","timestamp":1782519683995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/tycpc.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-4d7b\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19835,"size_decoded":20210,"mime_type":"image/png","magic":"PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced","md5":"9cccfc8ca4e4f50e4155a906a42666cb","sha1":"6687ef39ed3ba532124b8155234e819655ac0827","sha256":"38fa753bd6894fd8b0fdd94ba7e7bd9da32cb1e58017c44ce0147afba97b4841","sha512":"4e5e74b92841a16efc4cad516894bdaa1eca4ccdca290bcb36bbaa68cbe2011a6d12005f5bc2946532bbddc4e73161589ab3a296a734b78ad12aaa540bed9cca","ssdeep":"384:nC4JlgpsDv49JmGFnsvbCU5jAEVzJ0smbzRgZGme584WLMM0tq5PHcMV:Ccw9J9FybCUTzJ0smbZhwPH5","tlshash":"ba92e1cc99b518a51940f1dc2f338a48cfe9112c29e58776b1d377a2d94ae6f307c60b","first_seen":"2025-02-07T02:11:03.006958Z","last_seen":"2026-07-22T12:25:41.159136Z","times_seen":914,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/departments3-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.835Z","timestamp":1782519681835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/departments3-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93604\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-16da4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93604,"size_decoded":93877,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 642x428, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff14710076f9e987fa5fa98d82f35f27","sha1":"4a734331a2f9e9b8b9bb03cde80516a1f8b30963","sha256":"48b2b316f5289cc1c3d38220fedbbd103600ba8508d23ddadfca058f770ba32e","sha512":"28cbedf39476e8914adbfc25412b54ed88f21a7a57993e9ffc9b93e5e659431ed71aa13a3547c81083a1971e6aac58c0b37ddac96157114f104175eaabbfcffd","ssdeep":"1536:PZKbLlrhSUu8X46uB8FfF6gd7b7dV3T67ANRk7OoMEQ8DJ9hdWgFllHiwBjavApV:PZKVhZle8X6gdn+7AKOo/BlnXlHrugTJ","tlshash":"219312e33420f7219a3096e6712e73ed0b1b4059706d593312bc78aab15ed7bfb93190","first_seen":"2026-06-27T00:21:58.223321Z","last_seen":"2026-06-27T02:04:23.899336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:22.635Z","timestamp":1782519682635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 10 Apr 2026 01:10:56 GMT\r\netag: \"69d84e20-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158220,"size_decoded":158494,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-07-22T12:48:43.727248Z","times_seen":32284,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/js/link.js","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.984Z","timestamp":1782519683984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/js/link.js HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 05:26:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e0d83-6c3\"\r\nexpires: Sat, 27 Jun 2026 12:21:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1731,"size_decoded":1001,"mime_type":"application/javascript","magic":"ASCII text","md5":"a4564c9abd2ffee12e85babb30fb496b","sha1":"7ef21312cf4a7b233576fc5b068c54a28fb0285c","sha256":"565d3f9ba3f97075eb514b9fc2da0d669800ed5d7979cded4733f3a0f374b515","sha512":"fa8c6ab8a5087540ca346d26e4aeed39c8753df68f5633610da246665208a41a4246404f2844e749c0d4fbbaf2242f54d2f1a09f20055d2528322f6925b2b33f","ssdeep":"","tlshash":"2231c058e6d038271d274867695b2c04b593500f7c0aec02f69d4ac0efb272e4b7ace4","first_seen":"2026-06-26T21:41:32.449574Z","last_seen":"2026-06-27T02:04:23.889619Z","times_seen":4,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/dafa2.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.996Z","timestamp":1782519683996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/dafa2.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 05:03:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e9211-880d\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34829,"size_decoded":35166,"mime_type":"image/png","magic":"PNG image data, 299 x 79, 8-bit/color RGBA, non-interlaced","md5":"cd8c9178b347f37c9bef76b8f675e3e0","sha1":"1e14408dd2512718208a674236ebbcb4442d3bef","sha256":"488ecf2fc34918b7a5e0c41b0538b6a6907d7f2f84e5df8e367b4b25f5efe454","sha512":"01b8e067c463405404750d9d892b5f6c1dbfd74d19800e7acf0bfcac4d2ed9d0ab7769788b68e518d4e2c31185829696b620b25d562655848747ac4df98395c6","ssdeep":"768:1KEXfnummCpkmHFV6NACX1aXu45xX6piNtn8MMIpO2jQ115gd8Wy:1Kmfn/mm0XcX/96wNtnDO2jQDOdFy","tlshash":"10f202dbfb6b16e89d851b6c21966c0c02c7869bc7fa94f1943a0c3256dce05a97cf90","first_seen":"2026-04-08T23:53:33.224031Z","last_seen":"2026-07-21T16:55:25.75051Z","times_seen":288,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/1552215839168.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.997Z","timestamp":1782519683997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/1552215839168.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 13:08:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2178c8-b63e\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46654,"size_decoded":46733,"mime_type":"image/png","magic":"PNG image data, 1125 x 630, 8-bit colormap, non-interlaced","md5":"3dda79b55c5295df032d46aa45a92091","sha1":"b943ea4cfedc16aaaeb004c35655279758a79d7d","sha256":"f4e477a563baefc7c098aa5d645cd9e01b357764c9e8b40da49b348d91065f39","sha512":"c67334c095889d88d11c3741ba2a350976091d6150a1f5a537c67ca689a55dac3ccc6ce46b6a40051cb463fd4cd97e4e2de13beb7252b550994c06d5ba370f15","ssdeep":"768:s2+3QKxRbzHyMivDCxNx6xCdeU//NCOtOGMP3ClUIEFIbbpez4L8ph18pXQmVRI/:strxRbeMJh//NCbalDE+pezt18ZQ6i","tlshash":"552302be9841a0c3ec485233df2b3c1a79efe9b75a3f7586205994181d721ca0154fdd","first_seen":"2024-02-21T00:22:35Z","last_seen":"2026-07-21T16:55:25.748322Z","times_seen":805,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:22.922Z","timestamp":1782519682922,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T13:24:20.356579Z","times_seen":17450888,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.766Z","timestamp":1782519681766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Apr 2026 01:10:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e1f-38a52\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232018,"size_decoded":32163,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-07-22T12:47:44.17961Z","times_seen":2740,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/app2-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.843Z","timestamp":1782519681843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/app2-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52288\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-cc40\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52288,"size_decoded":52560,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 593x395, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0e10512ab800157a46a11fc4d9ee4086","sha1":"a6d8251ec610cfaf214c1e5cf298912c21a517a3","sha256":"0176b61d557d489693fc982cf48e1c8cf4ffab961ae78b01437693bad3b5fa98","sha512":"c7ec474f239edc592d50c352587a225bb1fa6ce1980a2c15aede4d07c261d815534d1fbd2951a9e73dee68d2586cbc25befb37df6dbf46e59018f4ea78467c1b","ssdeep":"1536:2P233Y7VnudfWz0R/BpiJz47Ssx4Vqg6Zc:2eYR0g0Ra1oZc","tlshash":"6033022de0208229ece9b571c24dbe449f8de6d99ac267d941ab932c334e2d53453cde","first_seen":"2026-06-27T00:21:58.233598Z","last_seen":"2026-06-27T02:04:23.896598Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/365pc.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.991Z","timestamp":1782519683991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/365pc.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2255\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8789,"size_decoded":9164,"mime_type":"image/png","magic":"PNG image data, 189 x 44, 8-bit/color RGBA, non-interlaced","md5":"e0c9d379cd4926e815abd7d25c32f5e4","sha1":"e9a1fb55262d96495f14da278c7242cc3fda956b","sha256":"7b50586f667edbeb0c3d573a44d40742354c385a2d7ae1971aa4b0173c11173d","sha512":"519aaeff0baab73e269e86413df78c8563728cb4b1f17e448877c4853a726df366f201b9e869078a4fa460517530a84b5ae9da4290511aeb4d0b93aecb9ac99c","ssdeep":"192:6ZTS99EegUNgEBTJ35PgUUxiKlqSvxV5mG5pqghmCoTHV0:2YzgogEr35Y7cK1YGmAMT+","tlshash":"1e02a0bc5a62079b3d1aa9f8172c54f1fdd070eb411f7c99947d201b0c68a1c83af4a3","first_seen":"2025-01-31T12:39:53.02929Z","last_seen":"2026-07-22T12:25:41.169025Z","times_seen":919,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/js/home.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.819Z","timestamp":1782519681819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Apr 2026 01:10:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e1f-16aa\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5802,"size_decoded":2098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-22T12:47:44.200731Z","times_seen":1305,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/hero-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.830Z","timestamp":1782519681830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/hero-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 107220\r\nlast-modified: Mon, 04 May 2026 19:14:12 GMT\r\netag: \"69f8f004-1a2d4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107220,"size_decoded":107494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 772x514, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"392f1e73f337cae15c50aec01935ae80","sha1":"052da6a3fbc43cce67adf358eb58f9d02eb0151a","sha256":"b9c6d67eb72b91ddbd0c366d32813ece5103d6bbbc38a71cf49632684818b1cd","sha512":"ec2f9b31bc8874c85af174409be5c93401c6a3eae4dcd1af1afc7768d2e53e048298e21aa30f8fa9d774393c321647958bbbf8cd17807cddebb044dbc0d45b0f","ssdeep":"1536:3y/AQs/9x7yEuH8mL0tMD68r47ZVXN/rBjq0LEwdgv8IFyoG8j0anpJYM3SEOQFX:3dQt0IIdVXlB20L9dgvFAJUr7S455gbu","tlshash":"c9a31218bbe3a39d51d041ae8df0030cfd64d98a2614ec92fa67e6af7454af98c597c0","first_seen":"2026-06-27T00:21:58.2356Z","last_seen":"2026-06-27T02:04:23.892986Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/departments1-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.831Z","timestamp":1782519681831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/departments1-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60922\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-edfa\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60922,"size_decoded":61194,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 651x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41e4a001bc111569d918f995de4fb3a2","sha1":"a9f384c395d5f0074f912cfb59ca94e44fe74b6e","sha256":"b3247f0be15586b69b22821b3fc3a8bd03bc35d14322361ac5871604d5f8d00e","sha512":"f07bd3072593eadfa514450df64b7c1a9e4159939e795507dae9fdfcb7962072c01883442b5f790d765683c9563bad8197cd2806c7c42961153ab4c672207fd8","ssdeep":"1536:nLqld33POEpdP76PDF5Bq1NDC/9F29hx0wdMT0xCYe:ymEv76JqbwHBwdMAxLe","tlshash":"f95302c14ae2b21b3fce159731e2d0068a234063a5e05436df6ceb7f596747ae02f64b","first_seen":"2026-06-27T00:21:58.236513Z","last_seen":"2026-06-27T02:04:23.877939Z","times_seen":3,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/css/module.css","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.767Z","timestamp":1782519681767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Apr 2026 01:10:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e1f-28112\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164114,"size_decoded":32362,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-07-22T12:47:44.175902Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.769Z","timestamp":1782519681769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Apr 2026 01:10:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e23-4691\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":5190,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-22T12:47:44.180104Z","times_seen":6136,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.814Z","timestamp":1782519681814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Apr 2026 01:10:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e1f-13bb5\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80821,"size_decoded":24420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-22T12:47:44.19101Z","times_seen":2719,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/e/dongpo/tz/tj.js","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.821Z","timestamp":1782519681821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\nlast-modified: Fri, 10 Apr 2026 01:10:52 GMT\r\netag: \"69d84e1c-328\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1159,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-22T12:25:41.161737Z","times_seen":840,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/app3-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.844Z","timestamp":1782519681844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/app3-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43204\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-a8c4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43204,"size_decoded":43476,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fbc22922fa6108f769e9c9c9a062318","sha1":"79be3500762bb948fa229f040dda922f202d5a2f","sha256":"296aff17f958589fddf752110919b52a301219be089691a0831b470120620d3d","sha512":"d92c58d921e3439e947e9391d14a0a278b119e697f61460d93d7ceca2763a3e4fc3a53372516aa1f819c05dc1ece21c5ee05cd444de44a8a70b2b4f8f092b0a9","ssdeep":"768:i5ZYZDsEqj+CH02N5uNHxarjF9o2xSVIiki42nPm2ZeWQ9+nOnZu:L4PH02N5uNHxarjFkTkiv+DW++nr","tlshash":"f113f2c30d61a51441bbea56361abd0e2b11a84a4eea3f83db12ff74779d0c744b9458","first_seen":"2026-06-27T00:21:58.239643Z","last_seen":"2026-06-27T02:04:23.868575Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/footer-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:22.595Z","timestamp":1782519682595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/footer-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60888\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-edd8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60888,"size_decoded":61160,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 782x521, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d49bc60238bd4b7bc8cb1010dfa4c893","sha1":"3d79d283fb710aa01013309c42adfd1094f1abc7","sha256":"dc6034bd81a107a7bff6913367dba01e5e38baad58de5d69c2cc9906354301e2","sha512":"e4a8212721a8ba8180ff93c9a11b1faeee2d9cbad4c119d936c240e4adc391bf131a437d4d061bb9c5e3d8a69c5d101f173016dca1858fea6ca357b29accbdfa","ssdeep":"768:6skJ8oWnFvwoGAooMo4shEgGAhXKnIxBCgPYTrgUjdA9u97wCZRVeJ8EgO+soJv+:6j8Xn+uEgRhXEIx3hFu9xRoza+hlEBu","tlshash":"285302c3d32635b5ec02ff0b56b8cdc82494015718b2f9a9dae6b49fbf8ad451e90463","first_seen":"2026-06-27T00:21:58.240767Z","last_seen":"2026-06-27T02:04:23.859263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":754,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/xpjpc.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.993Z","timestamp":1782519683993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/xpjpc.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-5800\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22528,"size_decoded":22646,"mime_type":"image/png","magic":"PNG image data, 183 x 55, 8-bit/color RGBA, non-interlaced","md5":"c53d923594566be7e0e41e8d720c0ac0","sha1":"e16a4b701d10291bbff90178e8b0d5f576e00821","sha256":"021994557d1d9642fdc16a0d8f6e471bec81bea7f366de6ef631f536c165418b","sha512":"554f7d6d44d26905610a65e21bd157ec30fef501c356e97787deca22f9089216f59e284f0effab7b18da89134af594d4ffd5eed889b1b5a4d5a5412456b9832e","ssdeep":"384:QfchEzlZmrXTjUDkJe2tERBxq2ceTdr1lFJ3d2Oo+UQSYJshjRHXvcQ:QfchEzrmrXTjUhP42cKpFJ3lo+UHYa//","tlshash":"fba2e0f1f36ff1b54a924d554cf8e2b080978942e088ee6135cb204acade8d31d993e7","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-07-22T12:25:41.157757Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/cover/mhxyl03com/departments2-56.webp","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.834Z","timestamp":1782519681834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/cover/mhxyl03com/departments2-56.webp HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 118558\r\nlast-modified: Mon, 04 May 2026 19:14:13 GMT\r\netag: \"69f8f005-1cf1e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118558,"size_decoded":118832,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 634x475, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd2268b9d44f2cdbef997d91630997aa","sha1":"0cfb1e6109b173e25711dc1cf29e398bff45ffae","sha256":"aad288185d046ed88f1c753591fbaa4834900245bc3432b5ca113aec3eadc5cb","sha512":"52334487c719f64e93c4878b88ee297c0aa98d5a91a0def24952871f799271a0e983ebb2ba8a0a2b3fdd68d4053bb69fc789df744d30c5b23da437f9ef2a5b68","ssdeep":"3072:EEHl6TDvtHYMifNaWGM8/MReETzYhrVHT1ktUR:EEFYDVHJil9fKSTzWrFT1s2","tlshash":"22c3124e2b5426b709ac5b2b13fc56c6498bbcfe113138c0c065895e91bb9f4fac6279","first_seen":"2026-06-27T00:21:58.242338Z","last_seen":"2026-06-27T02:04:23.898506Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:22.891Z","timestamp":1782519682891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 08 Jun 2026 14:48:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a26d64f-219f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8607,"size_decoded":3122,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4292cd40e55353061739ac52cf187f34","sha1":"1b879ffef2a1a98e8d3ce71ec46c072eb1d0d8fd","sha256":"cc2a05923ddea6b66e0e63c1bd80265439831f828516e73f74c0ea146556dffc","sha512":"805f6f2cbb2de78bdb861c517a2e0c27ebacdb63c72cd0ea7cc5b657f03fa76766a14e94477fc2baefb6c5dde5ac14a5ebdbb9b86b5143fd87a5b1a45eb30885","ssdeep":"192:3/5rnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sAAt+:3ujmX7AAt+","tlshash":"8902852661d3115b2822d1a66ff3171b6664d507c20bc9a97ecc16cdefc9ac9c8a738c","first_seen":"2026-06-08T14:32:58.324408Z","last_seen":"2026-07-01T01:07:48.707548Z","times_seen":59,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":262,"receive":0,"ssl":519},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/ico/favicon56.ico","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:23.466Z","timestamp":1782519683466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/ico/favicon56.ico HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:23 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Fri, 10 Apr 2026 01:10:58 GMT\r\netag: \"69d84e22-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":17232,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"05aac84d43e9b455cd5456b57e44c823","sha1":"ab017064583a116fc13b4aac9fde9632bbc5e618","sha256":"96ecce23858d073e53c46557bd272dc33d26b22e3070d619b01e2a9b77a41904","sha512":"1073d4fd3da0f9e5a72cdbcb8f4e28fd5369304a2fdb376ee4473396bfd616103eb2b64caeaef6e3989375854c58f7a9b9b59e2e5c6fbf560d1a990d84ed6e11","ssdeep":"192:85IdozJUCEXOfe9ZXTZBi7lrDvP7iNTqojwBpSN0A7Mnh5:N8CU/n7i/S8N0AQnh5","tlshash":"11728a47b31b9a0bda6cba752381deb79268ecdc2403d94261f2f36fbcdc3056954099","first_seen":"2026-05-10T07:30:40.419953Z","last_seen":"2026-07-19T23:47:22.356618Z","times_seen":10,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"154.204.28.51:19964/static/picture/jinshapc.png","fqdn":"154.204.28.51","domain":"154.204.28.51","tld":""},"ip":{"addr":"154.204.28.51","port":19964,"asn":35916,"as":"MULTA-ASN1","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://154.204.28.51:19964/","date":"2026-06-27T00:21:23.988Z","timestamp":1782519683988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:35:05 GMT","end":"Tue, 30 Jun 2026 05:35:04 GMT"},"fingerprint":{"sha1":"CD:9B:13:C6:8F:3B:27:93:5C:43:F4:71:61:D2:AF:57:FF:C6:E3:BD","sha256":"74:81:C2:22:C2:94:69:B4:82:75:5D:B0:E0:AE:F9:46:A5:F6:9B:A3:71:69:6C:12:62:3E:E8:27:4D:1A:6B:78"}}},"request":{"raw":"GET /static/picture/jinshapc.png HTTP/1.1\r\nHost: 154.204.28.51:19964\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://154.204.28.51:19964/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-a334\"\r\nexpires: Mon, 27 Jul 2026 00:21:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41780,"size_decoded":42160,"mime_type":"image/png","magic":"PNG image data, 295 x 113, 8-bit/color RGBA, non-interlaced","md5":"1d2140363e0fda69f41537010f37ac74","sha1":"9f3791b6ade0a7966dee0253cb698564490e9440","sha256":"65ff8549228320f54f3d93e45194314c43c7cea541241876a57633bb5ac94f92","sha512":"75dd491fe42a57dee94c06e5e389323f0b32a584f3d0223845ea8f945ac9cff401e65cc381f4e8973dd78c14655abfff000186a770df78acddff35e6bb69fa86","ssdeep":"768:fUD/+JUtuV8Sp+uA5mBhYhXXy7I1VzKT26hq34ZhMNg1de0nGtXIIq5y7RYLIXK9:j2SYd1Xy7wVG66BvMNg60KXrsLB","tlshash":"3113f1a116d7074d278849fcda334deec406ab285d19b93ec5f68f34e3846c4d083a66","first_seen":"2025-01-31T12:39:53.036928Z","last_seen":"2026-07-22T12:25:41.177859Z","times_seen":918,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.hxyl03.com/skin/fontawesome/css/all.min.css","fqdn":"m.hxyl03.com","domain":"hxyl03.com","tld":"com"},"ip":{"addr":"156.224.57.196","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.hxyl03.com/","date":"2026-06-27T00:21:21.770Z","timestamp":1782519681770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xc1689.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 19:39:11 GMT","end":"Sun, 02 Aug 2026 19:39:10 GMT"},"fingerprint":{"sha1":"41:01:9C:1F:46:28:F7:1E:01:5A:AD:C1:93:3B:72:76:D5:3F:65:EB","sha256":"DE:64:FD:9A:46:AE:7B:62:01:D9:6F:BE:67:80:99:D3:C5:D5:C1:B3:9E:53:C1:86:70:28:77:1E:70:78:7E:96"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: m.hxyl03.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.hxyl03.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 27 Jun 2026 00:21:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Apr 2026 01:10:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d84e20-1907e\"\r\nexpires: Sat, 27 Jun 2026 12:21:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":23140,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-22T12:47:44.200133Z","times_seen":13317,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"m.hxyl03.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}