{"report_id":"98b73cfc-9410-440b-8e05-04ca0b055f6a","version":6,"status":"done","tags":[],"date":"2026-05-10T19:32:10Z","url":{"schema":"http","addr":"shtxtx.com/","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"final":{"url":{"schema":"http","addr":"shtxtx.com/index.html","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"title":"上海同心同行公益基金会","dom":{"size":42929,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (410)","md5":"f495909f6ffaee444da46cbfae209f32","sha1":"51ee1a040fe4039fed9ca07551687139f7013304","sha256":"653c0e4ed3fca99b0e22e67976852d9bb9afea5999f222a44aca1e328355419b","sha512":"e7feb33d09c000bcb53d1275faed4ccb6d225b9a2e534b1d4628e0fb665669e77ee472accee93b8592da6c634e2d45ff5f2d3f41d5dcb343ab9702bc0958bc92","ssdeep":"384:f1E57I1cosevB4mmBazB9VK4M+m+KBrO0JxWoTBAS1TtzTz5/r:O7IOos0ByE1PYRO+xWoTymtzTzt","tlshash":"0b13406186f164a7008382826e215b5f7fc2f647d91b1a44b3bc1fcadfcad96cd1325a","dom_hash":"domhash6f628a3db7f7c43f75b4d397634e28fa","first_seen":"2026-05-10T19:32:17.162799Z","last_seen":"2026-05-10T19:32:17.162799Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shtxtx.com/","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":0,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T19:32:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"shtxtx.com","ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2020-05-09","domain_rank":0,"first_seen":"2025-10-29T00:49:22.129503Z","last_seen":"2025-10-29T00:49:22.129503Z","alert_count":100,"request_count":50,"received_data":3822107,"sent_data":44262,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"shtxtx.com/js/kxbdMarquee.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebcc90f6d6a9b93bd7b86f77299a7922","sha1":"bcb54d574a58a94cd7ff3b7924823fd445784ab9","sha256":"6419a220877b70d2c0809ecc612c9c81506d18def76439d7feeff0cfd0a172cf","sha512":"b07cc69cb66df1068edb0b5934f932e2b2a25b3ffec676731bb951c370832349578beb5699d803e23122ecaec47b5fd41579b9032a66aacdcd6045ff832d27fe","ssdeep":"","tlshash":"a4811018714162c41cbfb117f797034ceeba1893600a81983a6c6eb6af74b359542f9b","size":4090,"data":"","first_seen":"2024-12-04T09:17:29.539169Z","last_seen":"2026-05-10T19:32:17.180546Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/my.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c50b74fcf7e41da6f8b634595809183b","sha1":"d9f25105d0f86093779c794fd1c8e046bb3154fa","sha256":"63a8557178d3776089b19617b379fb5b84f4f2a83ca692aec105abbe93fb53fd","sha512":"0937a810295e0ca6fc52ffb86026c232f8fc7fb0041cd937ac49c7e4064ccae8651697277e46d21290b1ed0a4e200747f186b5d3fc6aaeca9c6c9460c924e477","ssdeep":"","tlshash":"9671042eb571012481b370734d7f0914ee4a449f9a168a00fdef79f55f71206ebe6e68","size":3649,"data":"","first_seen":"2025-10-29T01:32:51.22995Z","last_seen":"2026-05-10T19:32:17.189158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/index.html","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d32900eb9446b24953debd051187de0","sha1":"04c8f7143f4a8ca35a4e9e54aba9475d37d3d790","sha256":"be8dc835c4585db48a9ea2aa781d729f30ee70f29751fe7bb7dcacc065f04410","sha512":"c5c03c29d8d79c7bd2aa091734dbfdd6196eb1af0babd5bc2b73366197b5fa7c67d0129bbfb7fdabc7970ca124504b7bc68ca5df510ef72c0b4fe0412d5027f4","ssdeep":"","tlshash":"b721599699a0a0b10a33a42e0c6f1310347641cb5cafbd717a4d0a85cf9d16c91babea","size":1245,"data":"","first_seen":"2025-10-29T01:32:51.264069Z","last_seen":"2026-05-10T19:32:17.224743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/jquery3.4.1.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fa855a7678b1938f16235881e3e80b","sha1":"67b6c9946134456d67c07765d230130d8679f8c6","sha256":"f2a84bc4f4cb8ae04162f42f1f3ebed1e05725d9b5bf666b885356c7698a071f","sha512":"d1eab0379a8736f8b14e73478f101a2656912c7fbb9b7d90707e6e8f782c09bec4b017eb86781e5b4d4ae8a37b3f89a931249527e839f28bee1389de21bd79c7","ssdeep":"6144:7Mahx/8LY8CvzokFFr2QFbPKs3J0G2H90KUWJEe/Vp896ZdY19lJQV2YpHe4habe:5OQFbPP380KUWJEe/f895HeTHevbhEJf","tlshash":"f554b3d9734f116f4ba233aae43b5149ff7dd1b0520550acb58d996c24a081883fafbe","size":290960,"data":"","first_seen":"2023-03-07T01:28:34Z","last_seen":"2026-07-19T08:03:19.33089Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/swiper.min.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe64821a58984db97b7c8f35009d1877","sha1":"4fb1c7717541058d09351992dfe6a1089aa63858","sha256":"aeae3704a1ecd565e486e58ca8217de97c59a45f8a90b8902019b3f7247ba2ae","sha512":"4c3df513c2ede5848561df13335dccc7ce13136f3031fd91dbb097af0691eaa321f8278b1ec9a9ed58fc0ec15de6e9327f564107bdf3e7896f01aa13e8d5d1ad","ssdeep":"1536:3j2qhmxfGyEWAGLwiMht9K89mAl3VViKsHWRLK753KgdKBjY4vHgZsUOU7eBWqTM:4kGLsG+mXFNddKi+HgZsUOUyBWqDgGsr","tlshash":"91d3194eb39061a551e36257525e8241a3b72809780ad0ac35b68cd7adbde4c13bfffc","size":134306,"data":"","first_seen":"2023-03-08T14:34:46Z","last_seen":"2026-08-08T05:56:20.685079Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"shtxtx.com/css/swiper.min.css","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.839Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/swiper.min.css HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:52 GMT\r\nContent-Type: text/css\r\nContent-Length: 4088\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:47 GMT\r\nETag: \"3175-350c-647a434e2579e\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13580,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13323)","md5":"71ab48a25c31c2df3c84537bf3a5740e","sha1":"9936563852a6337a9d2535988f4db5665f91a673","sha256":"98f42c97a729f2eedf05fb4ede4b7d118804fd4822a68ca1035cc624df788408","sha512":"6ced4706dd30c4f42f5f9745a1398c7bc03129ffcaba7742fb55662e2acbee2f8454215a66ca0e0fd14a30a15dece8dde76b541d639639527fd92ff6456d648f","ssdeep":"384:4UUbeQS7Rgx9BU0A/XCcif65W/1mXA82FHpx:4db67gbhA/XDif65W/1mXA82Fn","tlshash":"2852236417003837f3774f6e4a61e6b59f60cc838a934d9db2c0dd44e6fa8b9122eb95","first_seen":"2023-05-22T13:16:23Z","last_seen":"2026-07-28T14:30:13.98847Z","times_seen":155,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/gy2.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.856Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gy2.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6090\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:36 GMT\r\nETag: \"3140-17ca-647a4343cef9d\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6090,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 246x46, components 3","md5":"17a58ad2abfd11554c1d5f649285056b","sha1":"b129326cdd6dda6879926c675429aadc825e3879","sha256":"55f10ff95981e8eae647394675dc642a3528e597a72e7dedbd851a65c9c8affd","sha512":"37397a66a86927547a9021a863d66db7b5452e1dd0ab00dcd68ef111756318b0324f10588356ab1aa0a3d517ff6e30b9b7a29f33e3fb0a3915f45ced7df5eb8f","ssdeep":"96:nY2H62kKnkk2BoOP+xBhnFLk+KPpGqLuu2/0Imj6rfzqA3D:nv6ckkMoWqB7o+KPpmu2/g0qAT","tlshash":"84c16c5672d26c41d6f072a28aeec013aab6c160f1c33999d905c4ccb1a55762c67ed8","first_seen":"2025-10-29T01:32:51.246403Z","last_seen":"2026-05-10T19:32:17.165491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2720,"timings":{"blocked":2418,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/gy4.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.858Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gy4.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3771\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:36 GMT\r\nETag: \"313e-ebb-647a434377909\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 246x46, components 3","md5":"f2f6e3f494de9dad4ee65ffc2bcc9412","sha1":"75fa54fe769e2cd8c6aa95debeed29b52ed2bda5","sha256":"521ec5b6ebdb0386ec2428338c60367c834983837f07646b970d3901d3d7ea21","sha512":"f444f107676f2d7e38323b2b490cde0e5d1488cd73f9da439610a162687577d5d1bd1e5660388e9d041dc6cbf8d864855636490926d858cf58d6f7ce52454a5e","ssdeep":"","tlshash":"4a710991d4a93c85e1f5ec706bfef4371b6928087af3a105945a80a771670f6e81f0eb","first_seen":"2025-10-29T01:32:51.228521Z","last_seen":"2026-05-10T19:32:17.166904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":531,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/product/faf74ce6292ce279e5acf8b19fa685a5.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.859Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/product/faf74ce6292ce279e5acf8b19fa685a5.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29204\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:30 GMT\r\nETag: \"29b4-7214-647a413af7ddd\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29204,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 562x351, components 3","md5":"7ef00fd6fd1f8a9d677184c7000e7ad0","sha1":"f3107315b1716e73ed16bc41b30a6d9e10551e9a","sha256":"d815db0696b439e9cc37d1ba02ef7189017ef131513cf15ff991b406a64d4d0e","sha512":"4158c7417149b427ba256a4ed10eb16f131549e9bc3df0db5840cb46f8a218e3fee633285297e5ec56dd3db187e5c24bcfcdfa456290a63e225cd5947e6b8435","ssdeep":"768:8NxNaaPI9jPb1PRCCoVvHGqZ2dgvNme7t5p2:o3PIjPb1gvHGqsdgvQEt5I","tlshash":"7cd2e109f4d41485e7a0cdb4c68f4f70d4532729b644a2515ffe989ed87ae30db8863a","first_seen":"2025-10-29T01:32:51.257409Z","last_seen":"2026-05-10T19:32:17.168348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":530,"dns":1,"connect":283,"send":0,"wait":261,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/footer/865105cbc976408af6fe37103ee2a9b0.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.863Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/footer/865105cbc976408af6fe37103ee2a9b0.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30031\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:36 GMT\r\nETag: \"29c4-754f-647a4140358d0\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 368x206, components 3","md5":"95f1dfa6886d8cb5a498fbc5aa3503ad","sha1":"021b1ad4b76d422d62a33e576f1eea2f70e6b7bc","sha256":"45b3384102a5aec9ff6146e10a24e856d43cc0dc4694f13b62e1ab5d5f67b7c0","sha512":"bfd4b6668f551afa7571b65959994cc04f7635bd79c963da397723b4da3b98ac69713ce7883fadab84ffa93e2fee4908c44c9c8dfa3392538d0bea69a7a7174f","ssdeep":"768:nzs1VQlyy5d1XXzitUmxPeo9jsc5qrLqcSp:nzuVQUyX1XWt7jsc52qcSp","tlshash":"01d2e18da0d66d28d5b889bba5f7861d664fe08cd8913b28927e7036fd88034cdb9153","first_seen":"2025-10-29T01:32:51.258309Z","last_seen":"2026-05-10T19:32:17.170507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2708,"timings":{"blocked":2447,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/jquery3.4.1.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.868Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/jquery3.4.1.js HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:29 GMT\r\nETag: \"311d-47090-647a433cfa835\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"24fa855a7678b1938f16235881e3e80b","sha1":"67b6c9946134456d67c07765d230130d8679f8c6","sha256":"f2a84bc4f4cb8ae04162f42f1f3ebed1e05725d9b5bf666b885356c7698a071f","sha512":"d1eab0379a8736f8b14e73478f101a2656912c7fbb9b7d90707e6e8f782c09bec4b017eb86781e5b4d4ae8a37b3f89a931249527e839f28bee1389de21bd79c7","ssdeep":"6144:7Mahx/8LY8CvzokFFr2QFbPKs3J0G2H90KUWJEe/Vp896ZdY19lJQV2YpHe4habe:5OQFbPP380KUWJEe/f895HeTHevbhEJf","tlshash":"f554b3d9734f116f4ba233aae43b5149ff7dd1b0520550acb58d996c24a081883fafbe","first_seen":"2023-03-07T01:28:34Z","last_seen":"2026-07-19T08:03:19.33089Z","times_seen":454,"resource_available":true,"data":null}},"time_used":1353,"timings":{"blocked":201,"dns":1,"connect":283,"send":0,"wait":297,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/t2.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.424Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/t2.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1513\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:31 GMT\r\nETag: \"3123-5e9-647a433e3b19e\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 25x25, components 3","md5":"1ba5c965a5b51bae91e8cd603ffc0f9a","sha1":"2b603ff2087d54c8aec05904a748eef880361bfc","sha256":"db1963222747982bf11562af7a5ab9f741a8d4e9e4c2d90d79432513d5314c46","sha512":"6eb2f30465fa749ca3af02fc90a607248668d7bb313e021ad6e9960b6fec85acc22f941a49437e48d15a0edb9badb08374b282c59ebf6318f6892ed6acb5bbc5","ssdeep":"","tlshash":"ae319606f8c688c1fcec9db820f79c1716c5c501b9c4ee9a65cbc50aa8a01a788256dd","first_seen":"2025-10-29T01:32:51.242939Z","last_seen":"2026-05-10T19:32:17.172894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/prev.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.434Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/prev.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 1625\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:33 GMT\r\nETag: \"3130-659-647a4340e0a87\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"64bce84f2ef37ff4b75cad97d41a76e1","sha1":"9f96a17167ec002ad9d681e2caf7701874f755f4","sha256":"e58ba480988c53dab5ef3382f8eadd74c8ebd3c6e563730cc70be98e70b19d7b","sha512":"73c1a3b00f905681c9e31cd22413dc507b47a2ad6a377cb948cb9fa750db739351bf6cb9df7831f69477bb259b593825aaeedabbddecda8888d94c2d1237f134","ssdeep":"","tlshash":"3131c51eaaa95c80810dddd870f78ccff583a991c9c0f4a386e8d61a89317b1856e6c7","first_seen":"2025-10-29T01:32:51.221252Z","last_seen":"2026-05-10T19:32:17.174225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1840,"timings":{"blocked":1539,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/css/style.css","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: text/css\r\nContent-Length: 3808\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:48 GMT\r\nETag: \"3177-42ca-647a434e83b94\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17098,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"86dceee0d37f95ac639b2294134529f1","sha1":"c160b814ebf12241bcd6c315133e8c9410d7b1da","sha256":"2e41b349de0e245a53f36275f32c5a295d4922e9e156135f4e2bb638630447eb","sha512":"bad7b3298bc25dd817a5f32ad69b14d9be9a3a3a1da84e02d2852447288a5bbf71f12eef8ac85c1e50dcffbd6f1c7e3c04a902919747e1c42df49ee8dca17c77","ssdeep":"192:4bG6CdFodsr/UGwLEizToCda1EoA95jJFSVMw1oQs8PE531j+473WIWKRN08D2KE:uD41H2DFNY8mKsugi1Vs95IkN","tlshash":"6d7251a79bb32946b81785ac5f7e6758132c9017920ed96c7fcc364ccfc51e0a4b278a","first_seen":"2025-10-29T01:32:51.260969Z","last_seen":"2026-05-10T19:32:17.176047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":182,"dns":1,"connect":236,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/sanheng.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.847Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/sanheng.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 1112\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:33 GMT\r\nETag: \"312d-458-647a4340655ad\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 25, 8-bit/color RGBA, non-interlaced","md5":"e01c3a359f45b9dacda7c4bd51a5c7d4","sha1":"fb7e4db1f1c6d9fcffa64cbe873a05ecc01651d8","sha256":"cab10381d988634132474748f89140d4bf953800cd108c57d39bf0dbb589782a","sha512":"549a94500cd2feb51b4f7e8d4343a9b920cbc6c4fa632a2329922e19d1eb31b333adb5e7c543dfee941300f1acfa5e2e65b01018196932376fc62b6944023420","ssdeep":"","tlshash":"7221464df8009b41565cd48334fb80276b6544919ed0f19da4eed41a0f382f7d90b9db","first_seen":"2025-10-29T01:32:51.255063Z","last_seen":"2026-05-10T19:32:17.177761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3342,"timings":{"blocked":3041,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/aaa.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.865Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/aaa.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 16161\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:38 GMT\r\nETag: \"314a-3f21-647a4345a0d78\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 22, 8-bit/color RGBA, non-interlaced","md5":"5dff8cdd1c4d49f25a91d1972d84b8c2","sha1":"7ec67ebc6cf0b3c79ec5cdd35b8c48f2fef2d80e","sha256":"dcd7b857c7057685766156872d1b1cea7e92621e9d87d92000ec4f08aa79cffe","sha512":"e8ba4f0c349180a10ab3c9b99c151698c20a37f7fdcbe5ee6f0a6c7389cd5293c382af5117f4af55ebf90a7fa4e4095e9da988348fcf9ed7ca82d85de1bf4ff4","ssdeep":"96:ESESOkEWmRrxWxNX7sc5FG5buL3jCFmzd8Lqwd:ES7Ok60mk3jrCmwd","tlshash":"05729230bdf2b5219459e2301ed529499c764a479ac1dc06bbcd8c153f1279e8c5f986","first_seen":"2023-10-23T13:34:57Z","last_seen":"2026-07-02T10:25:26.514362Z","times_seen":54,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":2710,"dns":0,"connect":0,"send":0,"wait":304,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/kxbdMarquee.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/kxbdMarquee.js HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1289\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:29 GMT\r\nETag: \"311c-ffa-647a433cb6641\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ebcc90f6d6a9b93bd7b86f77299a7922","sha1":"bcb54d574a58a94cd7ff3b7924823fd445784ab9","sha256":"6419a220877b70d2c0809ecc612c9c81506d18def76439d7feeff0cfd0a172cf","sha512":"b07cc69cb66df1068edb0b5934f932e2b2a25b3ffec676731bb951c370832349578beb5699d803e23122ecaec47b5fd41579b9032a66aacdcd6045ff832d27fe","ssdeep":"","tlshash":"a4811018714162c41cbfb117f797034ceeba1893600a81983a6c6eb6af74b359542f9b","first_seen":"2024-12-04T09:17:29.539169Z","last_seen":"2026-05-10T19:32:17.180546Z","times_seen":3,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":201,"dns":0,"connect":283,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/t3.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.421Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/t3.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1506\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:30 GMT\r\nETag: \"3122-5e2-647a433e109dd\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 25x25, components 3","md5":"130543d4b4050805ccaee549919e37f0","sha1":"7d6aa704b790d12f8009240a9c2af464f478f46d","sha256":"bb948ded284df33623f11ae4ec18beaf01ca482fd58da6d7d1c630c79cc38dc4","sha512":"001c7728a0a028c8aa487b13dba8d2c93d140a2a2cd50e2e07d07373801b877a313c6a870b957b625511096bc60e33449fbbaa7d6896b3e96a1994cdecc6fc17","ssdeep":"","tlshash":"fe316305fca228c0f6a8d47034f2af6b1bd9448099c0e4516dc9c51bec562f25e59bdb","first_seen":"2025-10-29T01:32:51.248747Z","last_seen":"2026-05-10T19:32:17.18203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/next.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.437Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/next.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 1624\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:34 GMT\r\nETag: \"3133-658-647a434165ba4\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"1bd402b3c2ba34f4b90685ab885c5695","sha1":"c8821488022ce74b2e7ebacda712459b796c63bb","sha256":"1d533f763cf8c59dc3ca22e668b1cf45b539adb0e37b509c920f23da529c4e5a","sha512":"e5942e257ac7d42caa1f88173f5209f175b73d925e566980e14731a6adcdf732f2c7552e144487506be228d056b337d6521c81e6ff06a75b6cd2bf8ed2cbf555","ssdeep":"","tlshash":"8331072db8b1b44441caec0138e30427876749c2f9d0e868afaed4d698b45f2d49e6cb","first_seen":"2025-10-29T01:32:51.230882Z","last_seen":"2026-05-10T19:32:17.183585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1871,"timings":{"blocked":1611,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/gytitbg.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.446Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gytitbg.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1126\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:36 GMT\r\nETag: \"313c-466-647a4343152aa\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x4, components 3","md5":"181ead9f08648de5c10ba1921f9f2c5f","sha1":"99e07e8882f7e80d538b2c37f2cd59f5a848fe15","sha256":"6843159bb26227daeec2a972efeb0e8e56714208fc44265f26029e13d228a8c0","sha512":"43376f0bda00035219a4fcf9b73be853eecf98f011e013cb8b63dadb3886b73eaa6b06f63af70f27163e801aab6872bd77336d229e2a879fb0bdac1225930192","ssdeep":"","tlshash":"e621ef0fbca12cc0f055e5b634f79c2f5bce0550f9d0a667b4c5c81b5e204b29e592d6","first_seen":"2025-10-29T01:32:51.244281Z","last_seen":"2026-05-10T19:32:17.185033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/shzrbg.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.450Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/shzrbg.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26750\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:31 GMT\r\nETag: \"3126-687e-647a433ed00aa\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26750,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x301, components 3","md5":"406a1a69b649f620eb78ff513d70ac4a","sha1":"c6af3d78f0b4baaebe940a8f51e5971d1e3244e2","sha256":"b213237a58c7febfc7bac3a4af98dd1e56fc0e062032783fbbb548476f0db87d","sha512":"683c818976f4bbe981739c06d2180de063515e57117d276873c0eb9330481033ac5258e43cf01c5e52f10371718bd90e43c48ae747b27c47200b0a11d4c92f89","ssdeep":"384:n/9E/1TB4gdNIFrTDgQYX1SnkZltFpyddTrpQlaieuq+IW9cG3Mk6jgd68wgxZJ:n/9uTB4gdEPDOXfZ9py3TIeEf560GgxT","tlshash":"dbc2e1934b876c31e0f9f53509a7ea20371ecf0a9667c4238ede84e1e531887fb1a594","first_seen":"2025-10-29T01:32:51.244867Z","last_seen":"2026-05-10T19:32:17.186437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":237,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/systems/f5ec3a7e59d2453b33120b7b6e1bafb5.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.866Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/systems/f5ec3a7e59d2453b33120b7b6e1bafb5.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10006\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:27 GMT\r\nETag: \"29ac-2716-647a413797862\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 121x121, components 3","md5":"51f193fc79c7db794d9d1a4709141791","sha1":"b1330add651df45c7944fbea769dae279729672f","sha256":"8a04d0c8818758cb668468490c2d1476e7dce42e81c60f4b582df9f88f82f0c2","sha512":"bbb34fc3c34b98f67bf3d311caeeeeab242f7c4b482917c12e52c166e0e1dee283a8424f0c9a959802014a96beea0e44a6f989721611f3ea3cf1b625cbbead83","ssdeep":"192:lxThrqMUXXY4k9BQh3f6JERbOjXvCpZRWfFraIMXtxQtX5:lrXUXXYWN6Xv2RsDMwtX5","tlshash":"3c229e25701978c4f1d529e1bdb38c7bbec09ec068d06631beccd062b53a0f646a578b","first_seen":"2025-10-29T01:32:51.219867Z","last_seen":"2026-05-10T19:32:17.1876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3099,"timings":{"blocked":2814,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/my.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.870Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/my.js HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 911\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:29 GMT\r\nETag: \"311b-e41-647a433c8e1a9\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c50b74fcf7e41da6f8b634595809183b","sha1":"d9f25105d0f86093779c794fd1c8e046bb3154fa","sha256":"63a8557178d3776089b19617b379fb5b84f4f2a83ca692aec105abbe93fb53fd","sha512":"0937a810295e0ca6fc52ffb86026c232f8fc7fb0041cd937ac49c7e4064ccae8651697277e46d21290b1ed0a4e200747f186b5d3fc6aaeca9c6c9460c924e477","ssdeep":"","tlshash":"9671042eb571012481b370734d7f0914ee4a449f9a168a00fdef79f55f71206ebe6e68","first_seen":"2025-10-29T01:32:51.22995Z","last_seen":"2026-05-10T19:32:17.189158Z","times_seen":2,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/next2.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.449Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/next2.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1883\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:34 GMT\r\nETag: \"3132-75b-647a43413ac13\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 38x38, components 3","md5":"438f4655be9891b4a6330e84d6b6c5c1","sha1":"f14931382593a53319baedbe0e2dc52cfb0bb71a","sha256":"950a1c854aafb9b45f5e41a5ff7bc2783326de6a47dbd4378c9da030bd717915","sha512":"7ad87c5a80629c25061a9a049f238b2761d69eea6d2844dcabdd11a0e0210e9396dc44a9365ed7d5b3101ce20b98348f41703ecfb48a1e116f6e91f8b003dec6","ssdeep":"","tlshash":"8841d74ca4103d01d4c09e7239e2d0279f0306a085e3ad36b0ccc02df4910678c3f5ea","first_seen":"2025-10-29T01:32:51.253055Z","last_seen":"2026-05-10T19:32:17.19057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shtxtx.com/index.html","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T19:31:48.660Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkVDdUJHMmlFR3pMekpjZDhlZ0wwQXc9PSIsInZhbHVlIjoiSTJsclwvNjZFOGh2bnQya2NcLzNVZzRsYm9tdDRqWnE2Zlh5b0lxZ3RnT2t6ampWSXdwc2p5Wjd2SDBvekJGdlE2IiwibWFjIjoiYzRlODZlMWYxYWJlYzhlYjIxMjJhMGRlODYwZmJmNTllNjY2MjA1MGViZDM4M2QyMTE4NjgyZDlkZThkZGM2OCJ9; laravel_session=eyJpdiI6InUzMkIzTEc4WTdvMDFIXC83d3VYSDBRPT0iLCJ2YWx1ZSI6IlM3VVdmVnBEOTlyXC9YanVDeFYxRDI3ckpZYSt4MERvUVEzQVgzRSszalgxREh4RXpiVWZJYXBjaW1Xck1PeXZVIiwibWFjIjoiYmYyZjc2ODRmYTIwZjRjMDhkYzRhNmRiYzcyNDY0Zjc2NzVkYjhkNWY3MzM2YWM2ZGY3ZjU4MTg5YWI5M2YwMiJ9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":723,"dns":0,"connect":289,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/css/bootstrap.min.css","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.838Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:52 GMT\r\nContent-Type: text/css\r\nContent-Length: 20560\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:48 GMT\r\nETag: \"317b-235ed-647a434f2694d\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-09T05:49:33.416393Z","times_seen":59553,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/close.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.845Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/close.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 1578\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:38 GMT\r\nETag: \"3147-62a-647a43450f135\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4acd866cc0acb8f745fa281f692ac92","sha1":"4844ec6007c6af8f250acafd4a7b45c15db1ddf6","sha256":"1e3cda072ecf5ee0d82ed1d5d98b69ad12baa8732182703fc3a237f5fb8c5043","sha512":"0fb055dd52d2f1f87a4f581769256e7ca7c5ead3815506ce647a1ff437398c1a271b55cb068a4eac189aced9c7845b7a66c13f6a3463946cee2d87791f92353d","ssdeep":"","tlshash":"b63178aff5205c0793b9c1d215fb1457bd03f94499a8b4bdb4cbc026593919744296e3","first_seen":"2025-10-29T01:32:51.241308Z","last_seen":"2026-05-10T19:32:17.193311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3252,"timings":{"blocked":2992,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/banners/1da44c15ad5753b913b4ece91a05550a.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.850Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/banners/1da44c15ad5753b913b4ece91a05550a.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 115458\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:32:51 GMT\r\nETag: \"2a1d-1c302-647a418799068\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=[*0*], xresolution=98, yresolution=106, resolutionunit=2, software=www.keniu.com], baseline, precision 8, 1920x578, components 3","md5":"a98b1584b743b6b90d59a763fb287f43","sha1":"cb15b40704429d9b33ac46ad15a2c912e5a7ee06","sha256":"20c2289f1420e4ceebd7d4d9c46d29eab7b5063e391f893481169faa672293af","sha512":"1e750361990172e52d3bb25ad1ffdb0a5c31234277aa1182e5dfd03681c5f9ad119b8126ea251a2cde8915ff0f8b9184a0d314afa46507a4b3d6b1e03ea465a5","ssdeep":"3072:2lF8lfgnl/A7DcghVJclhUd9J5Jw39tF+He:2lIfgnZXoVJihUjdu93+He","tlshash":"37b302bb812041a3879997f77d0269eb4510723274fdb0e2387f2e1a7b0417aea5c6b4","first_seen":"2025-10-29T01:32:51.249539Z","last_seen":"2026-05-10T19:32:17.194611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2311,"timings":{"blocked":1690,"dns":0,"connect":0,"send":0,"wait":303,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/titicon.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.852Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/titicon.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1348\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:30 GMT\r\nETag: \"311f-544-647a433d9ca36\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 33x11, components 3","md5":"b187d7d7d845f623d88af3aee06be1b4","sha1":"97ec2d11cd3f4ea06a9d34ee0322ac647595077c","sha256":"09f2a034533a30eef942334eba7e068a55e629ae0b3bf54650dd2162969363f5","sha512":"556a8fc15caae606dcfb29ade75c0e2ff14aa8d3f88f17f3b8e70794a3a1db711a36c7faa1ee0bf235775995ac9111012165b1e1e623b9ef02f2a0a2571c9058","ssdeep":"","tlshash":"ce21b72e75822e20e4d8dd7174e3d2235b4a0050f5f3f9a76486c027f45a2fb5b260c6","first_seen":"2025-10-29T01:32:51.238973Z","last_seen":"2026-05-10T19:32:17.199692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2120,"timings":{"blocked":1742,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/gy3.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.857Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gy3.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5378\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:36 GMT\r\nETag: \"313f-1502-647a4343a72d4\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 246x46, components 3","md5":"cda41a4777ca8c33f8ca860321d93501","sha1":"f91b931b020485128655762f9e07c8596b238c7f","sha256":"a33da713fcf378a3557be540b8ae01908a381c8defce0d189bd7ec11717afbe0","sha512":"ac43f83c7cd909aafcb8a188c8fd771d13b12a8e63efc1c8571b8520741af1806d40a5a8961e3f42a5b797df9ef2c1235a1e04f0a6f190845d10844cc72d01a7","ssdeep":"96:nY2dChOGixXNLHFKUZdJ3ZdJLRzFGfkJs251tvdQulYvikNawh6nfl3xG8:nFCDix9LQUd3dLHGcJxrt1QSYZsUmnp","tlshash":"c8b13b641a592c20c9ff727b25ebf52f6633dc54b5c2c9f3404482b2bc6b16a36394da","first_seen":"2025-10-29T01:32:51.262419Z","last_seen":"2026-05-10T19:32:17.20075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/t1.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.427Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/t1.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1496\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:31 GMT\r\nETag: \"3124-5d8-647a433e63636\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 25x25, components 3","md5":"c3fd768e31021c7077b2f5c9ab43ccbd","sha1":"5f076d8641d607ca4652ca238bc01422a1c48034","sha256":"576c39dd652a8bf803e65bada077b82cef316f5fe5387be8e4123b820c39c4d7","sha512":"d08d9950afd001fb71c7fe7f938833ab279f4953e22568598f968d2efc511b9b550b7fc2dc85dd3498f67b6e64cd7594fa565eafa1a5f91c969acbe1914dd337","ssdeep":"","tlshash":"2131d849f98268c0fa18d83274f38c9ba6c281807dc0e097b5c2803b35211f3065b5da","first_seen":"2025-10-29T01:32:51.252154Z","last_seen":"2026-05-10T19:32:17.201598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/prev2.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.448Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/prev2.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1854\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:33 GMT\r\nETag: \"312f-73e-647a4340b2c14\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 38x38, components 3","md5":"a24814da0ea287b040f63482be0f3b37","sha1":"283b9803f769a1d173beed47ed9e91bca931ebbd","sha256":"750c9c283e4a8458ccff125ff866e2a9c96b7ecd5960c754e10b5511f6914962","sha512":"68f3e6b497525c259ca5b0a4dc95872dcf6eb94f66aa061841ed4acca6242502a49694b9081846e37a22ac7258d13933808d3c9c2a1de577715972f209a42736","ssdeep":"","tlshash":"b731e90efcc51d51d9dab9f139d6d112474f4d4094d3e585bee8e117b8821ab88161cf","first_seen":"2025-10-29T01:32:51.239755Z","last_seen":"2026-05-10T19:32:17.202508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shtxtx.com/index.html","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T19:31:51.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.webhostingtest1.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 13 Aug 2018 00:00:00 GMT","end":"Tue, 13 Aug 2019 12:00:00 GMT"},"fingerprint":{"sha1":"CB:D7:FF:51:0F:E7:C6:39:F9:FF:2A:B5:85:75:88:07:62:A7:E9:3D","sha256":"FF:68:4E:30:24:30:66:89:A3:B6:A9:EA:78:8C:FB:90:53:A0:09:22:AD:2D:06:1B:D5:14:78:31:BC:C2:BB:71"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkVDdUJHMmlFR3pMekpjZDhlZ0wwQXc9PSIsInZhbHVlIjoiSTJsclwvNjZFOGh2bnQya2NcLzNVZzRsYm9tdDRqWnE2Zlh5b0lxZ3RnT2t6ampWSXdwc2p5Wjd2SDBvekJGdlE2IiwibWFjIjoiYzRlODZlMWYxYWJlYzhlYjIxMjJhMGRlODYwZmJmNTllNjY2MjA1MGViZDM4M2QyMTE4NjgyZDlkZThkZGM2OCJ9; laravel_session=eyJpdiI6InUzMkIzTEc4WTdvMDFIXC83d3VYSDBRPT0iLCJ2YWx1ZSI6IlM3VVdmVnBEOTlyXC9YanVDeFYxRDI3ckpZYSt4MERvUVEzQVgzRSszalgxREh4RXpiVWZJYXBjaW1Xck1PeXZVIiwibWFjIjoiYmYyZjc2ODRmYTIwZjRjMDhkYzRhNmRiYzcyNDY0Zjc2NzVkYjhkNWY3MzM2YWM2ZGY3ZjU4MTg5YWI5M2YwMiJ9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:51 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: http://shtxtx.com/index.html\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35784,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":1785,"timings":{"blocked":766,"dns":1,"connect":252,"send":0,"wait":252,"receive":1,"ssl":508},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/backtop.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.842Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/backtop.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 1728\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:38 GMT\r\nETag: \"3149-6c0-647a43456c1a3\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"192ec9a778d3db1756b346ee1e784dc9","sha1":"106c60feb1c0c5e7f2dd1b8878de129b97f21b1f","sha256":"e3a67a9981f6c89733ed470135069089f27577e3b1a4f6b6ad419b8b6d132340","sha512":"b720eb8077007f908d5178b7fd7975bff4c33fb389f7960085dc376601107f714dd2fd0ef4297b99027ba9b2a8ab9ea0441a1478b3fa761f6d4fccd00c167212","ssdeep":"","tlshash":"9731d80ffa822a40d189e4d228fe8426c6358d314990a1397cdfd53f0d369a495665ef","first_seen":"2025-10-29T01:32:51.238141Z","last_seen":"2026-05-10T19:32:17.203511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3193,"timings":{"blocked":2902,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/telnum.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.844Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/telnum.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1592\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:30 GMT\r\nETag: \"3121-638-647a433defa78\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"7fe945f2270325e7f81bd5fd6480a764","sha1":"3a01fdb38d6aa36dfd31056259a88c953402a70b","sha256":"cb8d97350c01ba373bcd77882173db4b9cd5700da2759baa0262531ed58b3f21","sha512":"1bda02c4a82c3eece4c7e8d48efa65622bc6602901390648a09d780aacda307a53d52e2af71584397bd5b74079c08c1e4108c1f6d54cf3d07d945e90dda139e2","ssdeep":"","tlshash":"603195aaeaa0740543acd5c528efb423ff224e5086d0e119b457980e09e01e586d6ac7","first_seen":"2025-10-29T01:32:51.226899Z","last_seen":"2026-05-10T19:32:17.204682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":1449,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/banners/7bb6a500e2591df7d376af2640cff001.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/banners/7bb6a500e2591df7d376af2640cff001.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1076900\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:32:50 GMT\r\nETag: \"2a1c-106ea4-647a418750823\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1076900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 578, 8-bit/color RGB, non-interlaced","md5":"272342b639fece10df664b35697c8afa","sha1":"06ef96913eba6e7b4a5d06dbde50c4300b3e7f7d","sha256":"a5891b6c582d3f2535313486150da90f5895e61ad443b68b3f56860a46677cb7","sha512":"3ce52f9094429b71e30c3e39811755ee65a1e4b37219a52ff52838c31a510f5e95359179ef373f8f7f8a2ede88539539ab76a43005796941809ecdb3f8a2b247","ssdeep":"24576:FHT0SLsQzz5Cs2pFMC2K1K6pYgvjRDqljUQN7M8OQVbuW+:Hsg5t8CK1K6p1WFUQN7TOQVbuW+","tlshash":"d22533ebc76f5d34c13f0e078aca85259bc6f72e9d9d0856501ae095804f817caceb6b","first_seen":"2025-10-29T01:32:51.250386Z","last_seen":"2026-05-10T19:32:17.20553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3179,"timings":{"blocked":1724,"dns":0,"connect":0,"send":0,"wait":243,"receive":1212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/ewm.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/ewm.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10006\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:37 GMT\r\nETag: \"3142-2716-647a43442b06a\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 121x121, components 3","md5":"51f193fc79c7db794d9d1a4709141791","sha1":"b1330add651df45c7944fbea769dae279729672f","sha256":"8a04d0c8818758cb668468490c2d1476e7dce42e81c60f4b582df9f88f82f0c2","sha512":"bbb34fc3c34b98f67bf3d311caeeeeab242f7c4b482917c12e52c166e0e1dee283a8424f0c9a959802014a96beea0e44a6f989721611f3ea3cf1b625cbbead83","ssdeep":"192:lxThrqMUXXY4k9BQh3f6JERbOjXvCpZRWfFraIMXtxQtX5:lrXUXXYWN6Xv2RsDMwtX5","tlshash":"3c229e25701978c4f1d529e1bdb38c7bbec09ec068d06631beccd062b53a0f646a578b","first_seen":"2025-10-29T01:32:51.219867Z","last_seen":"2026-05-10T19:32:17.1876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3100,"timings":{"blocked":2816,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/favicon.ico","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:56.194Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:56 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:41:20 GMT\r\nETag: \"31f7-47e-647a436d8871f\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1d8d6ec6db51bc41baa131aa2a7f0088","sha1":"1800f3cd807beecba4647506e376828dbc377a61","sha256":"105e4bc136de4771d8091d2950141ba571fe0ce71c812bfd9134d879f27637c4","sha512":"c9c57d86dd91336046d341d5830c056c5505c081dffb32f6f78b6b26079b31c75fb1041b73e03ee68d93b2684fdb29a2161bf53dd73a986fca1fb715ec0769f2","ssdeep":"","tlshash":"4221e3d87eb4df38ce10e3726a664e51368f5a5ff494c4435010cee9373861f2855c19","first_seen":"2025-10-29T01:32:51.253806Z","last_seen":"2026-05-10T19:32:17.20642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shtxtx.com/","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T19:31:46.941Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":0,"dns":370,"connect":250,"send":0,"wait":0,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/blogo.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.865Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/blogo.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/png\r\nContent-Length: 26976\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:38 GMT\r\nETag: \"3148-6960-647a434549eb5\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 266 x 155, 8-bit/color RGBA, non-interlaced","md5":"47a10a3bf504a3531c00f34b623818e3","sha1":"299a55e655b90669144707f947014364f94fc12d","sha256":"3962da924cb9135de1feadc2a9327818f204e1922c5d407bc9c4ecfd798409e8","sha512":"83c0aafefe3a31589aa0f632096e4b2a04fe4254efe3f509366931210ab91c6ba01ea8dbb7272970f009a78f3b9292be9c8c0b49cf2a1c3badd3cca89c739219","ssdeep":"384:Lz3QE13Dnpx6/w5kJXTu4zU7fugIT6ccvECrDpp95YYkPBkuiLy8O7YpUymF:LzgcTUCqTu4zWuvTJY8BkuSyJYXg","tlshash":"dbc2e113791c02777af8d2923de332615447fcc2929d278ab687a475821847d2e2d66f","first_seen":"2025-10-29T01:32:51.242107Z","last_seen":"2026-05-10T19:32:17.207211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2972,"timings":{"blocked":2706,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/titbg.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.439Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/titbg.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1190\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:30 GMT\r\nETag: \"3120-4a6-647a433dc8968\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 14x5, components 3","md5":"b8b1ad8ebc294715d0b6eccee762785c","sha1":"ec27657d81f499a17756c495c0698189da5a7a23","sha256":"77c6a0b391f8805b7da001892a1221482a6eb42b1897cb4200eda36c87ceef13","sha512":"1caa77839b4e726145727bedee02141e59c6669a49333f805c832e87f52325b8b21f93fe10fcc0e6ef3592bdb79832463521cf9c7fa6d215684c9cef9aebdc77","ssdeep":"","tlshash":"db21ee1af9903c11ead8e47124f2c116da0794e0a9e3e5e1a5c9c84678e40b7da6e4f7","first_seen":"2025-10-29T01:32:51.243559Z","last_seen":"2026-05-10T19:32:17.208126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T19:31:47.883Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 196\r\nConnection: keep-alive\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkVDdUJHMmlFR3pMekpjZDhlZ0wwQXc9PSIsInZhbHVlIjoiSTJsclwvNjZFOGh2bnQya2NcLzNVZzRsYm9tdDRqWnE2Zlh5b0lxZ3RnT2t6ampWSXdwc2p5Wjd2SDBvekJGdlE2IiwibWFjIjoiYzRlODZlMWYxYWJlYzhlYjIxMjJhMGRlODYwZmJmNTllNjY2MjA1MGViZDM4M2QyMTE4NjgyZDlkZThkZGM2OCJ9; expires=Sun, 10-May-2026 21:31:48 GMT; Max-Age=7200; path=/\nlaravel_session=eyJpdiI6InUzMkIzTEc4WTdvMDFIXC83d3VYSDBRPT0iLCJ2YWx1ZSI6IlM3VVdmVnBEOTlyXC9YanVDeFYxRDI3ckpZYSt4MERvUVEzQVgzRSszalgxREh4RXpiVWZJYXBjaW1Xck1PeXZVIiwibWFjIjoiYmYyZjc2ODRmYTIwZjRjMDhkYzRhNmRiYzcyNDY0Zjc2NzVkYjhkNWY3MzM2YWM2ZGY3ZjU4MTg5YWI5M2YwMiJ9; expires=Sun, 10-May-2026 21:31:48 GMT; Max-Age=7200; path=/; httponly\r\nLocation: https://shtxtx.com/index.html\r\nVary: User-Agent,Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":1059,"timings":{"blocked":288,"dns":1,"connect":287,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/footer/f9d27f4072e050f826b90be848b4124d.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.853Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/footer/f9d27f4072e050f826b90be848b4124d.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72908\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:35 GMT\r\nETag: \"29c1-11ccc-647a413f62d64\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72908,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=www.keniu.com], baseline, precision 8, 369x284, components 3","md5":"b4de33ea7115b2e90dbfb1cfe6bfd1d5","sha1":"0918117115a5138cf9282895d4719bf654937f09","sha256":"c8046032dd99066b0a599ab051a200e070f7d7efddf54a994c17429d446a22a6","sha512":"fae7ea7adf67bec56be29d1e45cc1fa9776df3fefed64b222983b181d61fca3e9e0afafb37064a0899197448761300e2ac3bf0758a1f9cb139246bb055327636","ssdeep":"1536:dgehBDrt6+tlXjRKz7aQ9xtAomMxy5lXgBz4fWwRWdDgy:vyQF8znpqMxolGWWMogy","tlshash":"b463022f9d14650674665655f343accc4d0f8f745a879ab291549ec0fbe08c744aee0f","first_seen":"2025-10-29T01:32:51.245723Z","last_seen":"2026-05-10T19:32:17.2089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2195,"timings":{"blocked":1840,"dns":0,"connect":0,"send":0,"wait":287,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/product/1d27f98c4ddc5050c3ae9448729e5675.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/product/1d27f98c4ddc5050c3ae9448729e5675.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102160\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:33 GMT\r\nETag: \"29be-18f10-647a413dec885\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, progressive, precision 8, 1440x1080, components 3","md5":"dbd368e4cca2087980a8acc64219205f","sha1":"c29c29ca5ca97e1e6c7d15eb55754f9090448248","sha256":"b3ed31a424bcf8fe2b02610e74cc721ced0eeacef6c6ad6a62e6965d2acf8a5b","sha512":"f03705cdfcf2d5aa6c31793d49f9eed84c11d7e692b016850d5210b54b3ccf63356f33d47305fe80c8bd374db5334f02d8c6e6fad2a4a0bb3e5ebc0e4e03f2d9","ssdeep":"3072:CEBb7DQ7OT1eIHPc/7FLfd9q5NcCnKJ25EoPDY:CExZTVPcd7f+C2+ODY","tlshash":"c1a312ce9b6f2b88da0ccf786b9725138b851a1817e9f8a8344b5f31feb41604091779","first_seen":"2025-10-29T01:32:51.247263Z","last_seen":"2026-05-10T19:32:17.210193Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1433,"timings":{"blocked":529,"dns":0,"connect":0,"send":0,"wait":301,"receive":603,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/product/0571c0c38c2af49a2a5ca31a739d3541.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/product/0571c0c38c2af49a2a5ca31a739d3541.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 171030\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:32 GMT\r\nETag: \"29ba-29c16-647a413ce1e7a\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=[*0*], xresolution=98, yresolution=106, resolutionunit=2, software=www.keniu.com], baseline, precision 8, 500x375, components 3","md5":"56ab84144590bd6857f2b61ed2c2ec96","sha1":"1ccf3835c2643facb84b6a9647935b9453035cdc","sha256":"97c3e908b0b0670995b6110e2ac790324011f9f0081093352a9433e41701b5cc","sha512":"556c6d21abf99f30c8523701409af14ddb070d28d18798bbf2d9fe414d60eee4bbcd23c30c34722ddab8663a3c81999690cf87edfcd70fd6903bf029dce7b021","ssdeep":"3072:UeQu9iRaT077Kt/cBaSNWfQHkSin1zX75hxfIT2uSYobwNvIR8U4U1UG61Tg:rD9fKzYQHid53fJNYvNvIR8UdUPpg","tlshash":"74f322294505a632da86e16e8ecdfe3fd1136c1a3360709d53df98cec9ed83a14b416e","first_seen":"2025-10-29T01:32:51.222528Z","last_seen":"2026-05-10T19:32:17.211092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2518,"timings":{"blocked":1381,"dns":0,"connect":0,"send":0,"wait":284,"receive":853,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/footer/68a0bd2a481d59fc33f53c372616ed17.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.864Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/footer/68a0bd2a481d59fc33f53c372616ed17.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23458\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:37 GMT\r\nETag: \"29c8-5ba2-647a4141746e0\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 368x206, components 3","md5":"01a99289fe02af4469df5bd9575243d9","sha1":"e202023739d8ee0131cea8ae788663c236fd2bdf","sha256":"ec4d779b198d855a361327b6b1cc23606df0de635f873b59013ebc59492f9b33","sha512":"e982d074225458f8292d43f1b27bf2951c270c926a4db2d1937aeea4d812574c727d6ace866a9e45e23c2f7ad44acc4c357a591887348a47e4b8f7b6c9b6686c","ssdeep":"384:nQFcA6BHupgsYYjrbQh6rJoRdtwIyjR3wDKZR8pakoXcxv9PZxPQ49XV8D7:nQKA6BHg92UiLm2DKZvkHV3PQVD7","tlshash":"96b2f258f68f107db0dca0e55c44c8708c7a5a4f65c6a4e5ec2efa2736087b76889dec","first_seen":"2025-10-29T01:32:51.247994Z","last_seen":"2026-05-10T19:32:17.212043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2880,"timings":{"blocked":2588,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/huibg.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.452Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/huibg.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1146\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:35 GMT\r\nETag: \"313b-47a-647a4342eddb2\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x21, components 3","md5":"21eb2b056a9f71f4b2b959ec44420274","sha1":"50b80927db80c3b1e207bfec5b1a24de727e9dc9","sha256":"d3efa3fe0a83599275fc6830f51b9afc0215d15632069a86e0fe34232edb0dbc","sha512":"2d38c65cd2ea6880bf1d7b45e5922b12568bff2392b496231b4ed1619caaab95ec431f34de175c1552dbbb924c22f38962a26b4b4aa14281f49a18e454234a8a","ssdeep":"","tlshash":"2e21e10ded233c41d45898b52cf3911b0e115f80fbc7e51a64c9c456e8764f399195db","first_seen":"2025-10-29T01:32:51.240522Z","last_seen":"2026-05-10T19:32:17.212886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":770,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/product/f7b5de7c123d24c8cedf1f6f1b16dec5.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.862Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/product/f7b5de7c123d24c8cedf1f6f1b16dec5.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18732\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:30 GMT\r\nETag: \"29b5-492c-647a413b23927\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x308, components 3","md5":"88439b3db19df52401763e9d69b3e70a","sha1":"d2299a7ac789cdcdf06dad46ba224a5c3030120b","sha256":"9a02f3b465e3c32005b4b02d4f06428e4386f8c3bca9ee586872b74e26842a32","sha512":"7ffee54a0cb8c9a32d41fb85c279552ec51472ad3b8768e984468beab9fd73f07b5d8151eb47c34a22d406a78d898c3280af44741083ab15c9da9b9a5e0d5021","ssdeep":"384:7DP85VcFdWgKoNPlGNqvTqfZJOPHTvMhK9bhPjUOXYX:madWuNGwvKJ2BbhbUOoX","tlshash":"0782ad15f6261d849fbf1af40a07c04fe1066ab6dde6e1718d9368f63510f2ea58fb10","first_seen":"2025-10-29T01:32:51.223401Z","last_seen":"2026-05-10T19:32:17.215863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1678,"timings":{"blocked":1386,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/footer/2b66918e6694629b005b275686a8d9d8.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.863Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/footer/2b66918e6694629b005b275686a8d9d8.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38536\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:31:38 GMT\r\nETag: \"29cb-9688-647a41428567e\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38536,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 368x206, components 3","md5":"a17f59445b00140b03cc6f21f41470d3","sha1":"0cc5eb8c9d452135f97fbe4649b5db7e75bece7d","sha256":"81b2829c14fb04855a83199bb182d4632905faddbf94f33a4c519c47540b81b4","sha512":"399a689259f017e7107c3354912b600911e77a09d273f208b861a85efad0aefab99a633564c4061708c613355be49124a5df39cd2d2c613961bb33f5a388a0d8","ssdeep":"768:ntABdWwVQ6rz4CKr8Ll1WrGq7g34UviJNwwSlwMFSXN6K3c:ntszVQ8kleTWpkq6DSdbs","tlshash":"4303f10ae4fc8cd2e1c5aa640c55a26ae6c22538d6ebcff53d167479dd8213b42f30d6","first_seen":"2025-10-29T01:32:51.263341Z","last_seen":"2026-05-10T19:32:17.217051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2818,"timings":{"blocked":2516,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/uploads/banners/604ca2afb52e67c94df3b40303ff118f.png","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/banners/604ca2afb52e67c94df3b40303ff118f.png HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1248073\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:32:47 GMT\r\nETag: \"2a14-130b49-647a418432d2a\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1248073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 578, 8-bit/color RGBA, non-interlaced","md5":"cec233633a7b1c07b904dc425229ea8d","sha1":"04bb5671f215faef3ae4fcb920d27e360b4ae17d","sha256":"2994e5020b12cb04f2f750149844c8c558ab3c99a290ec3b4252ea3441be68a4","sha512":"9550de130c35094fca20b0ea2bcbd8551622502ead428746c888f978110eb02fb670bbf4956fe0c7c3d50e79619b48e5a19940027e386ab7556f11ee37bc7965","ssdeep":"24576:epXn7YjsSdnyvou78+KFf+YKhSYdXNkNDYIf:epXasSdyvF8+KFf0L1No","tlshash":"48253343ffc399a89c9d6454d546bd085cf7e8b0e8680bb9f7dab439d882600144aef7","first_seen":"2025-10-29T01:32:51.227688Z","last_seen":"2026-05-10T19:32:17.217918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2830,"timings":{"blocked":1657,"dns":0,"connect":0,"send":0,"wait":285,"receive":888,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/index.html","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T19:31:52.099Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkVDdUJHMmlFR3pMekpjZDhlZ0wwQXc9PSIsInZhbHVlIjoiSTJsclwvNjZFOGh2bnQya2NcLzNVZzRsYm9tdDRqWnE2Zlh5b0lxZ3RnT2t6ampWSXdwc2p5Wjd2SDBvekJGdlE2IiwibWFjIjoiYzRlODZlMWYxYWJlYzhlYjIxMjJhMGRlODYwZmJmNTllNjY2MjA1MGViZDM4M2QyMTE4NjgyZDlkZThkZGM2OCJ9; laravel_session=eyJpdiI6InUzMkIzTEc4WTdvMDFIXC83d3VYSDBRPT0iLCJ2YWx1ZSI6IlM3VVdmVnBEOTlyXC9YanVDeFYxRDI3ckpZYSt4MERvUVEzQVgzRSszalgxREh4RXpiVWZJYXBjaW1Xck1PeXZVIiwibWFjIjoiYmYyZjc2ODRmYTIwZjRjMDhkYzRhNmRiYzcyNDY0Zjc2NzVkYjhkNWY3MzM2YWM2ZGY3ZjU4MTg5YWI5M2YwMiJ9\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 7176\r\nConnection: keep-alive\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; expires=Sun, 10-May-2026 21:31:52 GMT; Max-Age=7200; path=/\nlaravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D; expires=Sun, 10-May-2026 21:31:52 GMT; Max-Age=7200; path=/; httponly\r\nVary: User-Agent,Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":35784,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"9dc8539f746010e1ce930880774223cf","sha1":"ef17c78028ebff5ac83769d89c6a0593db9fe780","sha256":"a9b38cf8ca5b53e2031c9d8ca51f91e1f95dc261a1109fcd96095dbd4774d8cd","sha512":"e0c81efef6558402080cf75f50d0d7a7d8e1f6962faef62aabbbf51d60c64f53ac15ffd235c9d5289fb33a089384ff4c7d8cc92daed2c536d7f6c09e956981ed","ssdeep":"384:vFE57IruosFvtkmBBa5B94m46+U+KBrL0JxoojBAy1TtzPzV/cM:+7Iaos5tREPGERL+xoojyGtzPzt","tlshash":"bbf21d6186f164a7019382826e605b1f7fd2e747d95b1a04b3bc1fcadfcad96cc1314a","first_seen":"2026-05-10T19:32:17.219768Z","last_seen":"2026-05-10T19:32:17.219768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":513,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/logo.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/logo.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:54 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7703\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:34 GMT\r\nETag: \"3134-1e17-647a4341941e7\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7703,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 183x127, components 3","md5":"e87bf075d25ed6abc42a56636ba70cc7","sha1":"2d6e30cdf3b40ecf838eece68ef70b8b50a1ce65","sha256":"cb3b563db30fecb568a79f625d82e7526f6bd6a6b36d39a077cb0a221bf00b50","sha512":"47d1c3b894de9be86dddf6e5827699f9ca8f35a5a269da08827aa6ad993f2a7abdd6a6cf0d685a29cfcd32481b86b06fdcdd28ad9e04ca9a63dc48726358c95b","ssdeep":"192:luLKaeGL0EjiDysPN6QVozIhZfEJNOkL2DB:luEDyrshZfaOkS","tlshash":"7cf17d189f1cf7e0f9e429302cc91df32bfb89179fe0548949f0c526e926428159639f","first_seen":"2025-10-29T01:32:51.261798Z","last_seen":"2026-05-10T19:32:17.221002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1844,"timings":{"blocked":1584,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/gy1.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.855Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gy1.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6853\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:37 GMT\r\nETag: \"3141-1ac5-647a4343fca27\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 246x46, components 3","md5":"881fa8a0c59eac71ec33a7857df9aa6e","sha1":"cb4020c430202722eadf5a368a78b1e75cc643fb","sha256":"9bb34d764580bacc20b1980499d920d639d3185bb45c35b8d22b82faa30cdc08","sha512":"7dd8f857cc3e7ba769c74470773429fe166863acb1e61e344b92fd4a85c7c01a52f8194c101e5903e3f17c30ef7f095d97647de0be46908c00e5895958c362ac","ssdeep":"192:nLs1RuiBZeYMkhfep1+LBtz/iim6v6v6vC:niuiB6yk+L7zM","tlshash":"3ee15e2d99628961d0f072a610fafa9354391281f76eefd445f88cc9b0d33b1b25f68d","first_seen":"2025-10-29T01:32:51.251328Z","last_seen":"2026-05-10T19:32:17.22194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2598,"timings":{"blocked":2306,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/js/swiper.min.js","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:52.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/swiper.min.js HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/index.html\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34158\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:29 GMT\r\nETag: \"311a-20ca2-647a433c6071f\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"fe64821a58984db97b7c8f35009d1877","sha1":"4fb1c7717541058d09351992dfe6a1089aa63858","sha256":"aeae3704a1ecd565e486e58ca8217de97c59a45f8a90b8902019b3f7247ba2ae","sha512":"4c3df513c2ede5848561df13335dccc7ce13136f3031fd91dbb097af0691eaa321f8278b1ec9a9ed58fc0ec15de6e9327f564107bdf3e7896f01aa13e8d5d1ad","ssdeep":"1536:3j2qhmxfGyEWAGLwiMht9K89mAl3VViKsHWRLK753KgdKBjY4vHgZsUOU7eBWqTM:4kGLsG+mXFNddKi+HgZsUOUyBWqDgGsr","tlshash":"91d3194eb39061a551e36257525e8241a3b72809780ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-08T14:34:46Z","last_seen":"2026-08-08T05:56:20.685079Z","times_seen":196,"resource_available":true,"data":null}},"time_used":1087,"timings":{"blocked":208,"dns":1,"connect":290,"send":0,"wait":297,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shtxtx.com/images/ibg.jpg","fqdn":"shtxtx.com","domain":"shtxtx.com","tld":"com"},"ip":{"addr":"139.129.157.232","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shtxtx.com/index.html","date":"2026-05-10T19:31:53.443Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/ibg.jpg HTTP/1.1\r\nHost: shtxtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shtxtx.com/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImtqbXczUU1SVHFoSkVxbkxvckltRGc9PSIsInZhbHVlIjoiYWUxZXFQMFFVMWYrcUlmTmJjR2ZZMmd1ZHpPS2xJWVBtc3BnS2t1Z3NcL0hKVzN6a2MwR2dha0s1cHZHZW01ZG0iLCJtYWMiOiIxMzFiMTY4NzY5YTYxMjVhYTM5Y2VhMjVlZWEwNGYzMzc5MmU0NTdlMWRkM2I0MWE0MDcwOGZiNTE2ZWQ4Y2FjIn0%3D; laravel_session=eyJpdiI6IlkxMlZXMitPbDhVTzhxNkdMOHV2dkE9PSIsInZhbHVlIjoiNWZJcU1YZDRwcWFGT05BN1ZETzRcLzNpVlZFNmNFQ2dIR0E3NFFQWlVXTENTSnozd29jYVRaRmt2NEFLUStlYUYiLCJtYWMiOiJhNzA4OWU3NjEwYzQzNDJmOGIzMjcwZjc4ZjNhMDIzYzc3YTViYWMzZTRlZDVhMWFjYzQxODA3YjE5ZDVlYTM1In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 May 2026 19:31:53 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 58056\r\nConnection: keep-alive\r\nLast-Modified: Mon, 05 Jan 2026 13:40:35 GMT\r\nETag: \"313a-e2c8-647a4342cb2f4\"\r\nAccept-Ranges: bytes\r\nVary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58056,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x417, components 3","md5":"168b81726963b8c044a4c28d5017dd10","sha1":"10be6979306e644523b1b866dd553108062e130d","sha256":"f1eb4642c3d282160098228f6fb6eee5bc7d50893ba2243c892302fce3916628","sha512":"b2f1f13dfb6ff9c271c44e24c458447cae0580e59bb292dc40d70478675bd0aebc19eaefeb4b8ad4a9db586aabd0c40efa0be31ee108128af25aad2ab599a507","ssdeep":"1536:lHD/vTkYWeaLufLGl5QGx064CFCrYR6Ahad:1vYeAujzGx0GQsR6AhW","tlshash":"7043cf09f536404cf599a27d1cad8aea583198f72cfcf706389d5de2cbe025b7028ad5","first_seen":"2025-10-29T01:32:51.260214Z","last_seen":"2026-05-10T19:32:17.223325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":467,"dns":0,"connect":0,"send":0,"wait":260,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"shtxtx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}