{"report_id":"957c9110-9533-4e02-8cc2-40918d2d72b4","version":0,"status":"done","tags":[],"date":"2026-07-15T05:24:42Z","url":{"schema":"http","addr":"www.nyidiu.christmas","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"www.nyidiu.christmas/#/","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"title":"首页","dom":{"size":41543,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16506), with CRLF, LF line terminators","md5":"f68874f99279d5836e0e5f24cf2f5c5f","sha1":"4a8c7da38f7270b431010134ea95e90821059fec","sha256":"23707a8858597591a2c574db4349ed23ade106f7dcc1a5e2998e6be8c814a3b8","sha512":"27859e4a0998b1f1d6533609deb6acd915a7b26091b5b28a0edac8b7138f91fc1ed38104e34f3bf2638ee780d9ddf387308c3662c84f62a5783ab6be1bc8623a","ssdeep":"768:y2RqHqZkyzWyMRg/73i5gXw3uYZ5sfrLsfEOsfQcsfQUsfEwsflvsW6YEJJS+:y24qZNzWyMRAlYZ5sfrLsfEOsfQcsfQ1","tlshash":"ef13e7b0541420fc7327c952e3c0db1c6a52f72288a15ccaf75f195e8fd57aa53c9b2a","dom_hash":"domhashf666777d0da7a86c3c68d7f02ac64722","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.nyidiu.christmas","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T05:24:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"121.4.61.130","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-10T17:30:37.560622Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.nyidiu.christmas","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":1177323,"sent_data":5416,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/chunk-vendors.7e8a47cb.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eac2c52276029f552bc610645869b4ac","sha1":"fa2d87d51c5d2132934e13b8333e84b5320e081e","sha256":"ae2da4726ec2b484d836b6e02ee1b812abc769008407c1fd63d6c3bb9c58a97e","sha512":"435deef7d43b8f0fe87f73c2660281e0065920e4f6aaa5346dc61d2cd2ce5cf0a2cb29a59d5c12afef897596b24cb22be6b4504f0df0e036541e54a873a0fbc3","ssdeep":"6144:iLxSXckYaYElMAPXtwTf3Olb/+xNv2NTlrbEvm/dO+Qhl1KvQz819Hj+CVcCCrq:i9cVvPdwTf3xV2tZ3OgvQzSjJ","tlshash":"b405f78df282b0b60be760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6227f7d","size":835654,"data":"","first_seen":"2026-02-13T00:45:02.728809Z","last_seen":"2026-07-15T06:42:08.497707Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/index.1c137d32.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d44aed6b4fa6b718d5dad2cf2a27c60e","sha1":"c86e6fb9f5791c898d0bbd1e64d47c918a2d9fde","sha256":"92d7ecb179df0b41f5672112773943ce1a61979a2b36a0ee4c4fdeff17038cfe","sha512":"3143f6ac39035ff596011b36f1af399b4795b6a41cac64b2e5badb47af0bd012f9dd07d83dc82c6243402d480b019ab2a6c126e7973263cb7f0296b947ca0e2d","ssdeep":"768:ctgZqPNoX2/lHPS98VdRjJvmP8rxj/gXxRicJrO77jAYsX1196RqHqZkyzWyMROK:woyPdXvmP8rxj/gXxRk4qZNzWyMRsUb","tlshash":"be833bd07445b4dd4752c806e58b2b04b226fe269c54bc89f37bd8c98fa875e930eb39","size":83174,"data":"","first_seen":"2026-02-13T00:45:02.733885Z","last_seen":"2026-07-15T06:42:08.500696Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/pages-index-index.8cadc352.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34584ad34b40090601a9fe0319cf8b6a","sha1":"4a5f157ef0aa62a1bf6e98568f06aaa97429c373","sha256":"6e758f6142578105638f168c8a46fe65d78ffcfc5d8a9dba56910d098bf807e6","sha512":"1db427b7ef03c7c8f64fc4577d13dd38a677ac21c3065b376abc7444de36b8a4dff92f5bd5360e06d56e4c6d5bcb3ec6486310845fb189d8b7c4b057632085af","ssdeep":"","tlshash":"b441040df0c1b59a165a64a4102f3b0a41377ebd7a09f992db70e0d15eb898f2136f7a","size":2109,"data":"","first_seen":"2026-02-13T00:45:02.615473Z","last_seen":"2026-07-15T06:42:08.496106Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-07-15T09:20:59.145715Z","times_seen":4396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"ZAudio当前版本2.2.51","filename":"http://www.nyidiu.christmas/static/js/index.1c137d32.js","line_number":11,"column_number":58003},{"level":"log","text":"App Show","filename":"http://www.nyidiu.christmas/static/js/index.1c137d32.js","line_number":1,"column_number":21606},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[index_image:map[configurable:true enumerable:true value:http://www.nyidiu.christmas/uploads/20251112/5c3df6f89430e99ebb69efd8a8c9cac7.jpg writable:true] index_type:map[configurable:true enumerable:true value:2 writable:true] webview_url:map[configurable:true enumerable:true value:https://www.bluegv.wtf writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"http://www.nyidiu.christmas/static/js/pages-index-index.8cadc352.js","line_number":1,"column_number":634}]},"http":[{"url":{"schema":"https","addr":"www.nyidiu.christmas/","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T05:24:14.859Z","timestamp":1784093054859,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T09:18:40.566653Z","times_seen":17261326,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T05:24:15.334Z","timestamp":1784093055334,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 774\r\nLast-Modified: Wed, 12 Nov 2025 06:12:09 GMT\r\nConnection: keep-alive\r\nETag: \"69142539-306\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":774,"size_decoded":1005,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"61ee4976286e8ddad38af9ca8fb4649a","sha1":"9d192d139f8903e277e58e556aad385b022dd3ad","sha256":"c4068c81d2e2225ff134d76b0fbb5abb774de20fd89bc70c7979ffe3b3e6f034","sha512":"88f5d22b470a5d0cbaaa48218c95340134e284bf95e51ba1a580be664528c64240f6b970716a22dd5ac07878f3b1f576d2fa5147e23fb9e1d52c16b5fb18b80e","ssdeep":"","tlshash":"9001f1c21c60f84d0720854174b6d21e89d649b5ad51c9603cdc2afc4be078ece7e811","first_seen":"2026-02-13T00:45:02.720195Z","last_seen":"2026-07-15T06:42:08.49953Z","times_seen":121,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":289,"connect":269,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/index.ed4a2d2b.css","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:16.267Z","timestamp":1784093056267,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/index.ed4a2d2b.css HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:16 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 12 Nov 2025 06:12:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914253f-1794e\"\r\nExpires: Wed, 15 Jul 2026 17:24:16 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96590,"size_decoded":30097,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2c05a28c7f2113821d909b7b5b918a3","sha1":"ccac94311f6ac6f580b64f47f7705318f1d226a3","sha256":"695bdbeea38a126c139158967cdd4f3a435e9936b9dff5b002e5f20a10fc7907","sha512":"3b96fbd1a89be8ae0b7479705cd4a2958ffe7f2f3f57ec23f407ad51ed8b447b9960728d77502e8fd8b2b19bf0971682030117559df250ea11c9bc1802364c3c","ssdeep":"1536:qlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nrhlvbc:hApuK7hmVrS1Wu3iG41nrPI","tlshash":"4493f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2025-10-16T12:28:28.877032Z","last_seen":"2026-07-15T08:46:43.37851Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/index.1c137d32.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:16.270Z","timestamp":1784093056270,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/index.1c137d32.js HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 12 Nov 2025 06:12:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914255c-144e6\"\r\nExpires: Wed, 15 Jul 2026 17:24:16 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83174,"size_decoded":31427,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42281)","md5":"d44aed6b4fa6b718d5dad2cf2a27c60e","sha1":"c86e6fb9f5791c898d0bbd1e64d47c918a2d9fde","sha256":"92d7ecb179df0b41f5672112773943ce1a61979a2b36a0ee4c4fdeff17038cfe","sha512":"3143f6ac39035ff596011b36f1af399b4795b6a41cac64b2e5badb47af0bd012f9dd07d83dc82c6243402d480b019ab2a6c126e7973263cb7f0296b947ca0e2d","ssdeep":"768:ctgZqPNoX2/lHPS98VdRjJvmP8rxj/gXxRicJrO77jAYsX1196RqHqZkyzWyMROK:woyPdXvmP8rxj/gXxRk4qZNzWyMRsUb","tlshash":"be833bd07445b4dd4752c806e58b2b04b226fe269c54bc89f37bd8c98fa875e930eb39","first_seen":"2026-02-13T00:45:02.733885Z","last_seen":"2026-07-15T06:42:08.500696Z","times_seen":120,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":274,"send":0,"wait":276,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/favicon.ico","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:18.546Z","timestamp":1784093058546,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-15T09:12:55.864092Z","times_seen":539977,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"121.4.61.130","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:20.559Z","timestamp":1784093060559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 05:24:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 15 Jul 2026 15:24:21 GMT\r\ncache-control: max-age=36000\r\nset-cookie: __uni__uid=rBESOWpXGYWuzXnqA09mAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-15T08:58:52.030215Z","times_seen":17150,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":2,"connect":220,"send":0,"wait":504,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/icon/yzy_wd.png","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.100Z","timestamp":1784093063100,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/icon/yzy_wd.png HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 12 Nov 2025 06:12:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914254b-402\"\r\nExpires: Fri, 14 Aug 2026 05:24:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1026,"size_decoded":1386,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"8a8293825533184aafeb530aab4c886e","sha1":"4aa6f1e1a5a18477bcb388a679e49bc3d5496675","sha256":"ddfc3ea44841193295d35bd8ef4439230840ad300ab0a1e3a75e423f3f7107f7","sha512":"ec41bd39de962ee87b896bf5b47f2980de477e6da723f90fda0081d03ba7a670ef45fd38103430af105f460fda8fa8b0547bd13b56bc0533013c2d37aa935166","ssdeep":"","tlshash":"cf11a8f9af8265b4541409be591f9618752b5fee209cc1fdb173ba4ced515c4c1dc280","first_seen":"2025-03-30T16:43:42.86833Z","last_seen":"2026-07-15T06:42:08.50327Z","times_seen":131,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":279,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/chunk-vendors.7e8a47cb.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:16.268Z","timestamp":1784093056268,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/chunk-vendors.7e8a47cb.js HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 12 Nov 2025 06:12:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914255b-cc046\"\r\nExpires: Wed, 15 Jul 2026 17:24:16 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":835654,"size_decoded":292216,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"eac2c52276029f552bc610645869b4ac","sha1":"fa2d87d51c5d2132934e13b8333e84b5320e081e","sha256":"ae2da4726ec2b484d836b6e02ee1b812abc769008407c1fd63d6c3bb9c58a97e","sha512":"435deef7d43b8f0fe87f73c2660281e0065920e4f6aaa5346dc61d2cd2ce5cf0a2cb29a59d5c12afef897596b24cb22be6b4504f0df0e036541e54a873a0fbc3","ssdeep":"6144:iLxSXckYaYElMAPXtwTf3Olb/+xNv2NTlrbEvm/dO+Qhl1KvQz819Hj+CVcCCrq:i9cVvPdwTf3xV2tZ3OgvQzSjJ","tlshash":"b405f78df282b0b60be760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6227f7d","first_seen":"2026-02-13T00:45:02.728809Z","last_seen":"2026-07-15T06:42:08.497707Z","times_seen":114,"resource_available":true,"data":null}},"time_used":6576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":6301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/icon/yzy_sys.png","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.089Z","timestamp":1784093063089,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/icon/yzy_sys.png HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 12 Nov 2025 06:12:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914254a-3c31\"\r\nExpires: Fri, 14 Aug 2026 05:24:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15409,"size_decoded":2533,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"25cf6367545b3466e441e57034be9445","sha1":"de770c968f26a58a2ea9b9f1576f3cdd5e7c6d73","sha256":"16f094defaa68fef586c1fd3580b2839518249baa89e773f7822a3c52f14a186","sha512":"a07933c75f1a254b8bf8a1e986288f9d802c6ca7e4bdf7d86def4331f8f248581615b335d28e9ebf38c19136f2ec710c0e6787577638e21d0dea895a3a2a0225","ssdeep":"48:r/6fM+k29W8sEvMxN+Y9hNmDbBCRCUsc5mG7lFvdMQSCnar9XkDKF:rShkEWRBxNXhNcmBsc5B7dMHpXLF","tlshash":"8762b454acf17060a0a9da314de51949ad620a879ec1ad06bfcc8c263f11bed8d5f1c6","first_seen":"2025-09-22T06:58:07.855333Z","last_seen":"2026-07-15T06:42:08.498362Z","times_seen":129,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/api/index/index","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.361Z","timestamp":1784093063361,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/index/index HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":396,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2cdb4eb1efb4a740cc62d540ea79d7e5","sha1":"fdd60681aeb9499533cd59e05f8b4cb9318f61fe","sha256":"d2408fc4a472553aa28919dd944fb5988e224476353d4840c0d78783fa8445c0","sha512":"a0de97b50bb744257e378a5ed176f3195ba586028c4f3b27a6721a5fb2c387d7b027bef0aeb86bec0aa9b28c92305fe22eb01903e30061fcb1422f8a291d9048","ssdeep":"","tlshash":"fcd022e1590bdc33078692ec1149de96e25a338b0ad627e81aae69f806ad8910229067","first_seen":"2026-07-15T05:24:47.715902Z","last_seen":"2026-07-15T05:24:47.715902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/uploads/20251112/5c3df6f89430e99ebb69efd8a8c9cac7.jpg","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.700Z","timestamp":1784093063700,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/20251112/5c3df6f89430e99ebb69efd8a8c9cac7.jpg HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 12 Nov 2025 03:51:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69140430-1d46f\"\r\nExpires: Fri, 14 Aug 2026 05:24:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119919,"size_decoded":119872,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x750, components 3","md5":"5c3df6f89430e99ebb69efd8a8c9cac7","sha1":"a2195e2dcd1959b86c47c0ca7f670f3058e96382","sha256":"9d05aafec93e570cf16b122fa5d8d9ffcf706bd296cc98f49ec5701dcfda6777","sha512":"cd8970c195ef17130552210df954089dc045a5ac108bdf21ff3443655da35153e4b2471384db1d971e1d4bff2872ffa253f4284f7d206d8f99c54edd97bbf003","ssdeep":"3072:QDJv0rbmuYC0/TX2kf0bgBtBQKTC18mSMIQOvgKF56b:KJcrGCGTGn2MIQOoowb","tlshash":"34c3025ac7b393949bd0eeb35c2778883ea80ab9b84c5edb53715d221f540e09d073ad","first_seen":"2025-09-22T06:58:07.865847Z","last_seen":"2026-07-15T06:42:08.498964Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":1094,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/js/pages-index-index.8cadc352.js","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.060Z","timestamp":1784093063060,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/js/pages-index-index.8cadc352.js HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 12 Nov 2025 06:12:45 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914255d-83d\"\r\nExpires: Wed, 15 Jul 2026 17:24:23 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2109,"size_decoded":1366,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2109), with no line terminators","md5":"34584ad34b40090601a9fe0319cf8b6a","sha1":"4a5f157ef0aa62a1bf6e98568f06aaa97429c373","sha256":"6e758f6142578105638f168c8a46fe65d78ffcfc5d8a9dba56910d098bf807e6","sha512":"1db427b7ef03c7c8f64fc4577d13dd38a677ac21c3065b376abc7444de36b8a4dff92f5bd5360e06d56e4c6d5bcb3ec6486310845fb189d8b7c4b057632085af","ssdeep":"","tlshash":"b441040df0c1b59a165a64a4102f3b0a41377ebd7a09f992db70e0d15eb898f2136f7a","first_seen":"2026-02-13T00:45:02.615473Z","last_seen":"2026-07-15T06:42:08.496106Z","times_seen":114,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/icon/yzy_zys.png","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.092Z","timestamp":1784093063092,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/icon/yzy_zys.png HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 12 Nov 2025 06:12:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6914254c-7a4\"\r\nExpires: Fri, 14 Aug 2026 05:24:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1956,"size_decoded":2023,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"753e783b4f6885eec34678e69edc0e3b","sha1":"458c35ae8ee3346ba052c17634a4f7b73cbb4d73","sha256":"a006de64f81da65afd97245efcfd6099152352ffb632f8ed6e0e5e04e685d71e","sha512":"8f7b430c90e2a2e94674c2f282dcce44925312f8ec0a5cf286925aaf206614f992932de0d25e1f567d85f030383cae0baabe70ca938f47ba489a969d3f380622","ssdeep":"","tlshash":"c841e889e5613400940ddac610bfe023ee328f6286d0e1e9fc8fd6529e481f096591db","first_seen":"2025-03-30T16:43:42.843638Z","last_seen":"2026-07-15T06:42:08.501274Z","times_seen":131,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.nyidiu.christmas/static/icon/yzy_sc.png","fqdn":"www.nyidiu.christmas","domain":"nyidiu.christmas","tld":"christmas"},"ip":{"addr":"47.242.217.10","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.nyidiu.christmas/","date":"2026-07-15T05:24:23.094Z","timestamp":1784093063094,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/icon/yzy_sc.png HTTP/1.1\r\nHost: www.nyidiu.christmas\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.nyidiu.christmas/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Jul 2026 05:24:23 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 12 Nov 2025 06:12:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69142547-412f\"\r\nExpires: Fri, 14 Aug 2026 05:24:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16687,"size_decoded":3121,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"e0da2e6bc9576d9586c1e7408804f73c","sha1":"c7f2d81ef09d294e9171ecfb3f1c3cf6eca50d40","sha256":"9ce6231996e3ab6feec3b2981910b04b5e18360958fc398ff3288babaf4d8b8d","sha512":"9c719d12a0c4114ff03c3900195d1287fb0c3ba052dc94ddc342b549d5372c9d9ea6ca1dba6d06e4713fea9a6d6e4be0ed45b22c791ab4f182a42083df1eaaa5","ssdeep":"96:rSAkEWRNxNXEhmtKsc5Bx+hZgGo4UtvlVkjFG:rSAkt34mtQ+ZgGo4UtvjkjFG","tlshash":"9f72e928fcf172a89549b63629c434895d730b83e681ac427bdd9c672f117ed9c9f283","first_seen":"2025-03-30T16:43:42.856988Z","last_seen":"2026-07-15T06:42:08.502774Z","times_seen":131,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"www.nyidiu.christmas","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}