{"report_id":"9a90ea7e-d01b-47bf-92c1-8ee92d2dcc63","version":6,"status":"done","tags":[],"date":"2026-06-07T01:36:57Z","url":{"schema":"https","addr":"tk-globmall.top:42999/","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tk-globmall.top:42999/#/index","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"title":"TikTok","dom":{"size":184525,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47117)","md5":"72fbdcbc7c15d4e37b7c5b095219f260","sha1":"c5b476fd42685eb4ea0e7e5b8bcb1d3042544b0b","sha256":"46ed6ef71ef25994db78b1e80485f186fff0392de6d7a98d2eef119cf5039da6","sha512":"95b34fb35934b9909d4ed1d0cb58a9fbfbddde3a7671fca6788cb6f0336d5c0f18a141fed140deda970b03d44a2193ff6e259436d90279ef5227e1838884dae7","ssdeep":"1536:7/ma4K5ddnNddnQ7KrksZQu6CiX92rIn9ub0QjgSJaXD4nKnWNc+Ry8pDoe4V2SF:KadtyKrksZyrt2rcuo/SZHtp78uViSfW","tlshash":"f20484b1ca69723b422b4cd870605f4eb5e3d31dda9b5a0167fc83891febca4ee05485","dom_hash":"domhash530f7065ca86845e8d78565d05317294","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tk-globmall.top:42999/","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T01:36:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tk-globmall.top","ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-04","domain_rank":0,"first_seen":"2026-06-07T00:28:30.082172Z","last_seen":"2026-06-07T00:28:30.082172Z","alert_count":156,"request_count":52,"received_data":7059389,"sent_data":23045,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tikroon.s3.amazonaws.com","ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-06-07T01:37:06.370876Z","last_seen":"2026-06-07T01:37:06.370876Z","alert_count":0,"request_count":35,"received_data":4929910,"sent_data":15994,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/entry.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4b67bb0366519508fa1a0dac582bfc7","sha1":"28563c537932712ce06457ee576966ec42472e09","sha256":"cd1d6943773f74160d66042bf585488063a22a51b2bd5a48e0a367326aaea31a","sha512":"42245191903986096e9919e07f6072b2f4b16564a8d16e6ce8ef412fca2c609a686ac741695a415d11503f8fd7aa1b621497d77d4de84cdbca52457551ecaeb7","ssdeep":"96:DFZbSFm2cSSFm2yKJSTqBhVY5SUZkjLIL8wjFO24SX6wR4I:G64TqJY8Akj8jEM6w+I","tlshash":"439194ba3150fc7a85aa146b701ffb16b6b63d321e3d5d20cf6dc1649d38e80268b764","size":4608,"data":"","first_seen":"2026-06-07T01:37:22.75672Z","last_seen":"2026-06-07T01:37:39.240925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-element.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08d1982af6ee67fcb706319a76fd4e32","sha1":"839c4aec3de1e0bbf0a421f2fda2130abdef715d","sha256":"9543b352cc086d018afd9c9fbd89eb3c600644e46cfe004bf3d63269f0fcda07","sha512":"38706f08f22a3f995c9362e72acc20a7f2b49dd563dd5ba1a57ba2b53ea818312768709ceb6b6aec431e0013ea77933c6c74b4256b154cedc7bd802654ebb22f","ssdeep":"6144:klMa5rLwLTUVe2as9+mCtleDOUFcFeiIW8CsjIU+QTBdFelE4E:kvwXUVe2axDmOUGtI8QTJelE4E","tlshash":"0b051a8d72c5f57147a360b0106f240bb33b2eac6809809cb675e8d96dbd909626ff7d","size":807599,"data":"","first_seen":"2026-06-07T01:37:22.762377Z","last_seen":"2026-07-11T16:46:31.672146Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-core.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae05b0c13b403e1d9fbe9b2c60d9bfd","sha1":"b3a16a077ff22faecaf8db45662c9aedf1c8ae13","sha256":"b825075a96466ee30bb072e03f4f57b43e578348cd2ec7a9a65150cf4187db7f","sha512":"e2f238b8b0e84584aca09f91342c92ad75b8debc22c269236d829b9333a111ba8d764b9d34cf5ab96bf6746bc7f0b0dbd8dc16b580ff57fc3dbc21dab978d8c9","ssdeep":"12288:lJexQ3jtdz29evPU+BOpkYEK3xLZYHiT6r49XD7B9FQcT/LYCk5Fyrx3rqahQ5FW:Ztdz29evPU+BOpfhxLZYHiT6r49XD7B3","tlshash":"86d47cdd27d7b7b8059402c2802f747632b95d7aff9da0e054e9f99a20e8684c113f7a","size":617296,"data":"","first_seen":"2026-06-07T01:37:22.879675Z","last_seen":"2026-06-07T01:37:39.279743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-globals.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea6d553d950dae5f7364960b9e52e5e4","sha1":"13bce6af12561ee590b3ec232a6fe840b05bb5d0","sha256":"56a06cd56b8b9ca45a79c127088899481b3dd03b148a77924774693de8cde0e8","sha512":"30b136342e135905101c7f9ba867778149c14c513a490bcec893dd752c8be2e62c03afc526383579989ca4faa9e0fd0809fc8c087776082b30edc5dcd9b84498","ssdeep":"12288:m9wSDZmQtdz29evPU+BOpkYEK3xLZYHiT6r49XD7B9FQcT/LYCk5Fyrx3rqahQ5M:gtdz29evPU+BOpfhxLZYHiT6r49XD7Bb","tlshash":"99d47ced27d6b7f8059402c2902f747632bd1c7aff9da4e05499f99a20e8684c113f7a","size":645635,"data":"","first_seen":"2026-06-07T01:37:22.881415Z","last_seen":"2026-06-07T01:37:39.282345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/pages-core.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e99244b0287af97250bee0687ed229a8","sha1":"94d97073823c3626d5d73c2ecfafbbc6386d0dd2","sha256":"f010ef3e9a1fb9d68fd3fa4f19447f86dd3ae4ca93d343b81acc19b0ee05c179","sha512":"7d1d5e40d314008910b35a5c3625551d3e43955c9263213c948abeb88d5eedf2cc3f11f36e359dde9b2e7d3358c829b33fb3a97aebb18617ba9a1cf4953f9ca9","ssdeep":"3072:/7KrSR/Kcyu3fvYsZ7J2DdD6sHm9t+k744rb:DPR/vHYsZQdD6sHG+iN","tlshash":"f4d39e2e31d4b8bb57a79165700f2a845c321d89a004cc87f77cdad5a2a7d7d272b36c","size":142994,"data":"","first_seen":"2026-06-07T01:37:22.822928Z","last_seen":"2026-06-07T01:37:39.178908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/layout-ui.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e0b936a048a94f13b3d7619e6419eed","sha1":"345a975cecc0ab8a4e408433ee23a6456821a2e7","sha256":"51808d5795966a1cb90db65d5141602ca7420885b47fc1f72a2fad22c34d0f4c","sha512":"4afcce6cc0e151b7f71b946b5ea0e643f44d03c5dc61b08cc002934ca3c44741a7ed4f3aa6f451582bd5e7674a989b101a451898b7f3ccc399d1d6dd5c08c789","ssdeep":"12288:DXo4+MdDyMYA6tdz29evPU+BOpkYEK3xLZYHiT6r49XD7B9FQcT/LYCk5Fyrx3rQ:U7M76tdz29evPU+BOpfhxLZYHiT6r492","tlshash":"e3f49edd23d2b6f8069002d2502f757532a91d7efb9de4e064e9e99a30ec684c113f7a","size":743785,"data":"","first_seen":"2026-06-07T01:37:22.882636Z","last_seen":"2026-06-07T01:37:39.283191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/pc-init.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5150b5d90d0f86c5fc40b346d76a3816","sha1":"6ac91f5ea4e6b44eafbe221be932f99e659f0e6f","sha256":"bfd6587f7c644145b0b44c28bf220001269edc0ea28bbbb50c3fb386ae2464ad","sha512":"27be784a4ebcdad3572ce03467f1d0d425075f2f732247959971a7f00b22b54e804a350af8c308e30b501295a756ea08ccba2250f5c5f30691aa64284ba4eb57","ssdeep":"","tlshash":"932124b93126ac140e481ceff60bff40141aac3aa4776fa09298ce6069bbc767714a00","size":1131,"data":"","first_seen":"2026-06-07T01:37:22.711575Z","last_seen":"2026-06-07T01:37:39.258429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-vue.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa1d201554544649e71aacd39fa2d917","sha1":"fef3f95e1852cee2457f229510be970063c0d1bd","sha256":"4922f9bb8b656a8666ec2640ac24059bfb2b20fcf44b384e64c403fcdcfec2e8","sha512":"8db6c4bbfd60ddf4afdcf9b5c4c2241f26b0e77e38c2e669848626e6cb18bacf396f313c163826ceac546ce9e9e298b5c97169a4332b38db75094c44fe3e0070","ssdeep":"768:Agh/+aULDeX424Nw+f9+fq/46/zlgbrsRLOaFcSsTfTyHW1kDENe4U7QuJmZZzEQ:PWaUuXH4i+FmWzmMLAZU4U7QH7zUM","tlshash":"8e73d6dcb385b07113ab20b540bf150bf33a7955a80ac1a0f252e4da7d7845ea16bf7e","size":79287,"data":"","first_seen":"2026-06-07T01:37:22.870456Z","last_seen":"2026-07-11T16:46:31.698752Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-vendors.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce6b9aed486b92ec369b719aa1069443","sha1":"46c9ccf11b2576f58223dd79b21433f9ae54f2de","sha256":"a873aeddcc81efa8851dd8877f74b306f382a8cba4d89a4c6f52cc27a6f6247e","sha512":"05c003a62060e53ba2f116c6ed03a4a48f315dab9543cf44ae43df408af543eb8896d50b27e9ba18ed06e1fdd25561a26a6d5d36fd0ace5f438282b37d31d61b","ssdeep":"12288:ocaUp+AKIukYNX+CaT0WNQPpxW2MmWGdYsKLFhUdRpE2rhMh6dUtV7xr4yT5b:ocaXfAYNXIJIYhFhUdRSweUDyFb","tlshash":"4695c6182a5bf3449549c0dbe93b3c84d2ade18aa40b14d15f718bf31bb2746ebadd13","size":1944434,"data":"","first_seen":"2026-06-07T01:37:22.884699Z","last_seen":"2026-07-11T16:46:31.73571Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/ui-element.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd24d7c24c5f5b45f802824f54c77586","sha1":"1774023c8bee973bff8714fd2473aed5d9a5995f","sha256":"d98e659feec6b738fc9f9561ab6b39763afd2a8a0aed0d1bea56fec1c1eac60d","sha512":"98f0cb1b8961ca3161c691b5e15f0d7c4943925ca5300b6aa270ab42acdf5551d648d1e3aaf8ee51f79954626ecbea2237b1f469507225bd316ce3b53ad159d2","ssdeep":"768:tgh/+aULDeX424Nw+f9+fq/46/zlgbrsRLOaFcSsTfTyHW1kDENe4U7QuJmZZzE9:OWaUuXH4i+FmWzmMLAZU4U7QH7zUp","tlshash":"e373d6dcb385b07113ab20b540bf150bf33a7955a80ac1a0f252e4da7d7885da16bf7e","size":79444,"data":"","first_seen":"2026-06-07T01:37:22.73038Z","last_seen":"2026-07-11T16:46:31.699339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-shared.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e79dcb225f6ae16c949e08a2a1c290f","sha1":"81ce765140d7b135f3fcbc65ef9731ab1721e7bb","sha256":"ecd847e1e7973c7679dff0af78d1fd016180fb638569d1ffea5e82ec119fcc00","sha512":"a4f3ab89bb15dbb8c4998dbe2e7f58088aad39e8ff03ebfbfb16b220651cb87c1a9b7ce93cf27918f0532cad73b25a2345ae947edcefa1ae8f0027abe527d708","ssdeep":"768:oCTzHahMp02iB/DPDGMn5dNjRoz2n5+EiDtzXq08A1965h1r2sAy9jSYMrjc1XW/:JTKDaZ2Dsyk/dvO0","tlshash":"8c63b98ef1e2b06d057a75b1707b6015b03929f478058542e77998fa3f6c858333bbae","size":70784,"data":"","first_seen":"2026-06-07T01:37:22.719717Z","last_seen":"2026-06-07T01:37:39.176932Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-2d0c4283.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54168cad936bc5f8728acedfea5930bd","sha1":"cb301659bfdd7ca0128f060533c49fa9a09ee9e3","sha256":"55f8c4b7ccad3c610086f71c685d980a5dc7fce3a03646b46507e1ccb028d360","sha512":"e0d1403f5fa9d54903374fe569a261450b4a5855050ccd0c5bdece036865187476452e6af7c9d899c6aa409900b700d096c299989393c93c44dd362a5d96026a","ssdeep":"","tlshash":"04019c4c78993c5a597bf4b080af5b8e227950672c1d457547a0f1d03f7497d2217f4e","size":747,"data":"","first_seen":"2026-06-07T01:37:22.702634Z","last_seen":"2026-07-11T16:46:31.723891Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/i18n-locales.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"212c2d30fea45fae59fae7d4d998b1f6","sha1":"e4331a93b34b3e2a69e0f844ce25496e0765fcd8","sha256":"88c6c62d0317a6a8b7c854a6b7358ac135b3da99e5e0755a2fed2148612f2a14","sha512":"0594474ee24d7f8bf18696659fb498accc70af38658166b6bc289436fb0ce7b5e406e003c0561f61d851ae9e190ac3d495356e969573c31402f17359d5c851cf","ssdeep":"12288:czDLTbhAhREDM9aGD3A0XNMU9EV3elQ8Y1bCZsyqx+qM18Wq3Wn4hHlbDCvIKfcq:gh7yMU9M8Ob/WR","tlshash":"73f48eefabd932fc0c58694ab08e3e7561dc1cb6f792e5e00cec962512f5d419212f29","size":724546,"data":"","first_seen":"2026-06-07T01:37:22.886143Z","last_seen":"2026-06-07T01:37:39.280745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-root.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2434421b3d88241967d6ea9656410c2","sha1":"e2b3fc434ebbc3fe9a63fa939576697e647d34c0","sha256":"dc24af585c7dac867b6d6b26706a1b47f6ddd0de65967e800338a6b0b9045688","sha512":"984425bf1aab4cb789c6b81c7efd379abd563a8d1ec97aff9ba4048f53afa052be6f1ea2356bcc5ff4d13747bc71d9765098402de646862a50f95420c13725c9","ssdeep":"384:2S+LylmQ5HuvY7D4SEmgt4t6EP+za+9XWvzpH73VnHh+O6fl7OBM6hkl1wm:2ymQBDh7P+zahHh+Pfl7O6r","tlshash":"8ba2f8e8f695b47a1b6730b4a03f220aba77b859240a8085f644e4cb7c7d50e7167f7c","size":22689,"data":"","first_seen":"2026-06-07T01:37:22.832962Z","last_seen":"2026-06-07T01:37:39.25303Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tk-globmall.top:42999/","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T01:36:32.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"2122-1780594067499\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 2122\r\nDate: Sun, 07 Jun 2026 01:36:33 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (312)","md5":"a7b7f0d9d31a7d0271ee22c4906215c9","sha1":"59ae0d80a097d6d92079b1b3d415e67561869923","sha256":"2305fe0c18ba4ae66bb385520a26fedc8950b4fe7f45357e3126d9eb63a37c93","sha512":"ecde356bf7f7ef7d929ef2619be568232c0dc5b976ff8c90d2ec1d7f6b3084fd151a2a67eb226a19e08ea8e0fbe5ba43f78094e1e381366cb855002f3aa26303","ssdeep":"","tlshash":"be41feb62d50510cb727839049fa170d236d95132609dca9b7ae306cefc1efce8a3759","first_seen":"2026-06-07T01:37:22.692166Z","last_seen":"2026-06-07T01:37:39.188632Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1437,"timings":{"blocked":593,"dns":82,"connect":247,"send":0,"wait":247,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-vendors.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:34.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/chunk-vendors.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"1944434-1780594106732\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:26 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1944434\r\nDate: Sun, 07 Jun 2026 01:36:34 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1944434,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26149)","md5":"d7021b3be18c8fc74675bb6e4927c6bd","sha1":"4a453eb60d460e5dbabe1ad5771b8f2baf9a43ef","sha256":"d033f522571010de4e72496dbfb6a184675de66c7d7bcb350c8687abe586d9b7","sha512":"bf483daaeb100325afce2f4ff1453c089ddd4609b98c2e0d8043356f60a2d167d36fe516f5e4081b3eda068aa87d62755e1680c2724f061909fb4001695c4a64","ssdeep":"6144:WEDus1G3e3Kup+AKIukYI1cIk3Xxo723akU9W/b2DcYKV30t33/51Xq5zxvvvpxi:ocaUp+AKIukYNX+CaT0WNQPpxW20","tlshash":"48350c182a5ef3409909c0dbe93b3c8895ade285b40b14e15f7197b31bb2357fbadd12","first_seen":"2026-06-07T01:37:22.694997Z","last_seen":"2026-07-11T16:46:31.678938Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2071,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":247,"receive":1594,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/ui-element.2bf1d5df.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:36.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/ui-element.2bf1d5df.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"212411-1780594068092\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:48 GMT\r\nContent-Type: text/css\r\nContent-Length: 212411\r\nDate: Sun, 07 Jun 2026 01:36:36 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":212411,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ba88695f302d81526451e967065879d7","sha1":"9da38d8d69ec6b6f506d697f684e44bc6419582c","sha256":"6cf4b6cfb9c9f13493bdc24061040582ce68df8596b033834d8dffdcebefb981","sha512":"95166b8a3196c0cf52c558e0fe4d8ec3abd33fa52dfff5485bcd8ab54edd3f0fd99cc8f60fdd814d9a25e113c761723f8057c9a3529a03d6b5fb3a86d89b534e","ssdeep":"1536:w28Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOxIco4Q5:JFJWTPL4Q+05q2f","tlshash":"3124a510db17217b222be6ad75c0ba896f18c323d8725b7bfd95741ccae64891163e0f","first_seen":"2025-04-02T12:27:11.328801Z","last_seen":"2026-07-11T16:46:31.70127Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":791,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-2d0c4283.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:39.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/chunk-2d0c4283.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"747-1780594105183\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:25 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 747\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":747,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (747), with no line terminators","md5":"54168cad936bc5f8728acedfea5930bd","sha1":"cb301659bfdd7ca0128f060533c49fa9a09ee9e3","sha256":"55f8c4b7ccad3c610086f71c685d980a5dc7fce3a03646b46507e1ccb028d360","sha512":"e0d1403f5fa9d54903374fe569a261450b4a5855050ccd0c5bdece036865187476452e6af7c9d899c6aa409900b700d096c299989393c93c44dd362a5d96026a","ssdeep":"","tlshash":"04019c4c78993c5a597bf4b080af5b8e227950672c1d457547a0f1d03f7497d2217f4e","first_seen":"2026-06-07T01:37:22.702634Z","last_seen":"2026-07-11T16:46:31.723891Z","times_seen":7,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right8.52dfdd77.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right8.52dfdd77.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5437-1780594089182\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:09 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5437\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5437,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"52dfdd77a3e609a3dfcdc62551f63915","sha1":"76f99920e705e7f2ea7aa14eda783b3b0be7a2d0","sha256":"2694904c51b4dfa120b1c8cbfca437ba901b107a6b901fc34799fc9d9da1a947","sha512":"0893ae02f3cd92485b211852ccee98714ddd9202a2d0c7fe556ccba6e598729161ccea477c324156b336a996a81a6312a42b7f26ae77b1962b763af0cf5cc28f","ssdeep":"96:WwDk9e67O7qkhkxrzmq3VT4E3sHsov69WGPqLQ62sqdqub5mm2fB/+DY:Vk917CGXov4JqLx2sqAOifB/UY","tlshash":"bdb17d287fce870cfdd28a71862ff379a1825e43260d278b50f5282cb5891dd8d154e1","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.720667Z","times_seen":1941,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/TikToklogo.8798ec77.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/TikToklogo.8798ec77.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"53769-1780594093813\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 53769\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":53769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"8798ec77b24780c54023161614eee12b","sha1":"59414d9684c64b31a7378b24365d62389d59d629","sha256":"fb1eb66b616065513f97f8b98543417af87109502c53066dd04352b7d070ca52","sha512":"235cbab437385d21a07a1658f1c7cd704e4656a418939b991df8635f4890fb82d5a370f57962b3f20b29def52b73fc90319f3a554553962243e9e59eff5e2a45","ssdeep":"768:51gmL9Qd4Hey09dVBJTcMaFszMQSyr0zHnkk91ncR9JsRjYmrkDDXizWF100bcEp:omL9Qd4l09dX+MH47kx++/D7YObO8gA5","tlshash":"d133d00ca28ac954e0024bdfdef68f1067712d1215d79796b02dfada4c94f4beea35c8","first_seen":"2024-07-06T16:44:42Z","last_seen":"2026-07-14T05:43:46.194599Z","times_seen":601,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":246,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/BankCard.fe6d8a7f.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/BankCard.fe6d8a7f.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"20746-1780594071730\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 20746\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 237 x 152, 8-bit colormap, non-interlaced","md5":"fe6d8a7f675383094bcb7ddbeca29ca2","sha1":"b4a8355c1fd6e29d364ebaebc43016f0cb13159d","sha256":"5eb50155eeb25caebb785718835926778a954653dea34212c17a43bda4b851d1","sha512":"a72322aa2dbd6a83f8dd33719cf93db1448498cd840c3e78d0398ca406be1db1b5c19b09c257a09aa36add2668551b6a91b73b69670e52777cfc13c76f13e4a3","ssdeep":"384:hCyeMW9DXLcOvw8zoRXhqgx6YZtUUCzgvRhFZpJdjwjADPQpX8gjkK:xE4Ov+brsYYkbFPjwjOPQygwK","tlshash":"5392e1d12ab27b00b734eab9157b96ec371631881c58c93669bf0232fdea55c078b875","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-06-30T01:52:56.441437Z","times_seen":1164,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/zd.161ad784.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/zd.161ad784.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"46541-1780594101300\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 46541\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":46541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 500, 8-bit/color RGBA, non-interlaced","md5":"161ad784813b03a70ad66f59b81d22b5","sha1":"28b29fed86e86e02f5722cebc969ac8e14613c64","sha256":"31539b56c579f839c414f5d54d9d836a87fbc11c84117dd6cd43bab47fabd7ef","sha512":"13b1d90bc99ad387ddd26043282360849bf4503dbf2a98496425e5ad54c0ea4c2df154d3e5f5d359a98416987ff100c746f6cbfa62ad90ce24d1d756693508f5","ssdeep":"768:UmZUUQar+kUUrD2cfjD2pUUvQa8oCc0+MNoMZ1k0AmVgGJvOnr:NVQMcC2tUUoKF0hX2LcD4r","tlshash":"0b23e145fd42b25cc3fc4073910a5b7473ae3e0a557d8b88b8658b1ace3b1fd0e56a26","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-07-11T16:46:31.683565Z","times_seen":1184,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":247,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/pc-init.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:33.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/pc-init.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"1131-1780594103867\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1131\r\nDate: Sun, 07 Jun 2026 01:36:33 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1131), with no line terminators","md5":"5150b5d90d0f86c5fc40b346d76a3816","sha1":"6ac91f5ea4e6b44eafbe221be932f99e659f0e6f","sha256":"bfd6587f7c644145b0b44c28bf220001269edc0ea28bbbb50c3fb386ae2464ad","sha512":"27be784a4ebcdad3572ce03467f1d0d425075f2f732247959971a7f00b22b54e804a350af8c308e30b501295a756ea08ccba2250f5c5f30691aa64284ba4eb57","ssdeep":"","tlshash":"932124b93126ac140e481ceff60bff40141aac3aa4776fa09298ce6069bbc767714a00","first_seen":"2026-06-07T01:37:22.711575Z","last_seen":"2026-06-07T01:37:39.258429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/chunk-vendors.1f415fb6.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:34.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/chunk-vendors.1f415fb6.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"38317-1780594068738\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:48 GMT\r\nContent-Type: text/css\r\nContent-Length: 38317\r\nDate: Sun, 07 Jun 2026 01:36:34 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38317,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38317), with no line terminators","md5":"17ef430fcfe69e2cdab0f207b591bfa3","sha1":"6034c5414d69180cbd510f2d2b87b94e1081f292","sha256":"2d6c075216266d0dd862bf4aba9d75ad03ece2932c77af602f9b4df42b676936","sha512":"e12821f9e664d045b12aa61cf2eb30c6a98b1e90c9104c384fa26e9f9ed519365c6f8e92b248b53688c2eb621e543661cef986945a1419a6de63e0688f3e1824","ssdeep":"768:nECmhishNnHBL98FmWb6CObhrb63if65WJ1mXAA0T3:nH6vASf65WCXkD","tlshash":"0b03de2407a2342ef637da2671b08e993b368003d4224fecd294bf5cd3965e55ad7de2","first_seen":"2025-10-09T03:51:47.874556Z","last_seen":"2026-07-11T16:46:31.676248Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":357,"dns":0,"connect":0,"send":0,"wait":247,"receive":248,"ssl":269},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/app-globals.d5110eb6.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:38.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/app-globals.d5110eb6.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"4896-1780594069112\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 4896\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4896,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4896), with no line terminators","md5":"2786187532ab7a9912094da94298df8f","sha1":"8f6e4ebc3a63004285d26303f032439fbde7722e","sha256":"46f580faeacc341627719fc2f9ba38e8f44bde5a14ac5b08bc800a14d1108a11","sha512":"29297f8f19c6a16fc50e0d56886fdf682c3713fea10ea918362baf25ae0c6e97bf5866ba886f183eb3911755669bbf5e9e2842e8cb87f7197d736622a78c9b11","ssdeep":"96:PZBZ5ZBZkZBZVZBZmZ3EqZBZqvZBZCZBZPoV+U2ZqfMcVkXqHjjBZfBZfBZFBZmD:PXPDKDvDEJEqDODIDs+U2ZmMcC6HZTzk","tlshash":"35a14561f22e16dd7373c4699740aa89de60e112c4e18fa6fc1e723c4ed624363e0b6c","first_seen":"2026-06-07T01:37:22.715248Z","last_seen":"2026-07-11T16:46:31.724823Z","times_seen":7,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":80539,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c281207793d4429e6c993c3f93a54355","sha1":"2b54057cfaf4ae9708302925b63562d8d55dc078","sha256":"f008a921924299dbd7b38286ae55fd5232820d1ccf4eef8215a0d695da325619","sha512":"a8c6e0fe2a9ee57130d4033fdf6dac07836ea865c78ec7fb6ed7d7e7f5eb5bdbea66a2012aae11cfda8f6229297372969582a7c6f49fe156613ee9e8c34b0918","ssdeep":"768:2c4A/ZTggBBy0oieQmy6fRw0RUC2+kTB+h6gB+8MrmkXpZfvCRyGxu27hfWcO5Uo:D9iHPfrgGnENmxPJcKas8","tlshash":"137363f24fe810376bbe51a154b57ecd98bfb03b99b08fa6a5d8dd0534a8cb51d81c20","first_seen":"2026-06-07T01:37:22.717107Z","last_seen":"2026-06-07T01:37:39.18653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1863,"timings":{"blocked":507,"dns":1,"connect":246,"send":0,"wait":348,"receive":495,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-17T17:41:48.5842Z","times_seen":7360,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-shared.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:38.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/app-shared.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"70784-1780594103216\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 70784\r\nDate: Sun, 07 Jun 2026 01:36:37 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":70784,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65405), with no line terminators","md5":"9e79dcb225f6ae16c949e08a2a1c290f","sha1":"81ce765140d7b135f3fcbc65ef9731ab1721e7bb","sha256":"ecd847e1e7973c7679dff0af78d1fd016180fb638569d1ffea5e82ec119fcc00","sha512":"a4f3ab89bb15dbb8c4998dbe2e7f58088aad39e8ff03ebfbfb16b220651cb87c1a9b7ce93cf27918f0532cad73b25a2345ae947edcefa1ae8f0027abe527d708","ssdeep":"768:oCTzHahMp02iB/DPDGMn5dNjRoz2n5+EiDtzXq08A1965h1r2sAy9jSYMrjc1XW/:JTKDaZ2Dsyk/dvO0","tlshash":"8c63b98ef1e2b06d057a75b1707b6015b03929f478058542e77998fa3f6c858333bbae","first_seen":"2026-06-07T01:37:22.719717Z","last_seen":"2026-06-07T01:37:39.176932Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/fonts/element-icons.535877f5.woff","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tk-globmall.top:42999/css/ui-element.2bf1d5df.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"28200-1780594070504\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:50 GMT\r\nContent-Type: font/woff\r\nContent-Length: 28200\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-17T15:55:22.976292Z","times_seen":26796,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/type/2026-02-22/4de6ff70-6364-40ec-bf0a-6200ed287ca6.png","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2026-02-22/4de6ff70-6364-40ec-bf0a-6200ed287ca6.png HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2uMpT18cGoqf/iSqX958ZhGoZKT30kFDi3FEXwjH2FNvsyFsYJhncXsTJk4jqLEpiz6HLOSJnrpbzXlyGzl1fiY0JPVeL80E\r\nx-amz-request-id: BP7Y7XFYHGPMRSEV\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 11:20:05 GMT\r\nETag: \"9f845d99dd33832e4a0f00b2cc5e5b0b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 41399\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 698 x 310, 8-bit/color RGB, non-interlaced","md5":"9f845d99dd33832e4a0f00b2cc5e5b0b","sha1":"bf727fca6529988b7d6edaffebd1bb0a3535b424","sha256":"18c7aebbcc86f1dee4f4490aa9bfc0b5c4260c50e6846245af177fb247e0ab5e","sha512":"6d4c2c5e700b14dd3775210cc6612c087296d34308c395f82ee9eaafaa5d4408e67f672cca8de72dfd55c1070e5df4a0fbf985269598a42caa3acc4f5242dcc8","ssdeep":"768:WeVwBDRzbCnhCAJ+G2yx+6tvuZvVbQov13A2250+vUnVNJWR:WYwf3Ess+pyEYvSvVbQaFA240WeXO","tlshash":"7003f17d1a871c65e027536b34db0b1c230b3996b8cadc8b66405c2134e477c7ebabb9","first_seen":"2024-04-24T08:16:39Z","last_seen":"2026-07-15T08:12:57.010145Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":369,"dns":60,"connect":94,"send":0,"wait":156,"receive":94,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/type/2026-02-22/a618c415-41d1-41f2-8a74-b985b655d783.png","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2026-02-22/a618c415-41d1-41f2-8a74-b985b655d783.png HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Wrw7NgoQT97/LZYYqRettoTGi4bpG6ayt6Iij26zWpc52xcUYwP6Lf2lroZ9UXH5Cb3VJ68F7ykp7VXmQul2VPyPO91Jocrw\r\nx-amz-request-id: BP7QXE50BK0GZFBP\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 11:20:45 GMT\r\nETag: \"9f38d77d904f502b512c9ec5b8ea5906\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 167342\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":167342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"9f38d77d904f502b512c9ec5b8ea5906","sha1":"1bebdca8e525a4c016780265cf05ba2e0621f652","sha256":"7be1f4180d586218d352c2e46603c046fbacdf908313b987becca84e09bbcc2d","sha512":"cbbae2f0cee0235b23fdf99e7e006101c9a6d7001a5c43cd2aec059fe207ceb0b17a6f51754406e006a7d3b78221ac572aa3db6e2efa58c36a7f1baa466d305b","ssdeep":"3072:2zHXQyGpimL+GdP+1wNE2AneMrUhkhYEHuxS2Sd4EbgdNSoDejQT8:2zHgzc4+Cm2AeMXZ2SdFCmjD","tlshash":"92f323e5cb37e0a3826f6a210d5da645e507a04727113fea532a8f53c38d3d75687ec8","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-16T09:25:40.614992Z","times_seen":5414,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":122,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/471f6e23-b8b2-4c3d-9349-f239fc8e8295.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/471f6e23-b8b2-4c3d-9349-f239fc8e8295.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qElavaJQEJbK/4g0/omt38VYnZV6AYwxY7MbUfej90v0Wy82jbSwmG3UtkYGc1CO47AnbYut2p5nZUtPRNqKtlI6fdB1KCPH\r\nx-amz-request-id: BP7JN0N1DDJ20JGJ\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 20:26:53 GMT\r\nETag: \"f29cae63570b400eeaffbb87d16d7deb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 138724\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":138724,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"f29cae63570b400eeaffbb87d16d7deb","sha1":"665ff6196eb381318ce1ef3c70b888bf0b212c36","sha256":"f51773df15a2d76aa600ad6dac39211ec6c028cbb4a9f02809b91ab007e169d2","sha512":"2c74740de1ab587429e463374111b5b41c99316326e949a94f0c9fd1112bed56e8282ffcc8c8c6e60dd171a7369affc8107e25f5a84f78e8c1069c4030e71ce0","ssdeep":"3072:QjhDyhxMl6oQM1opzXFQGIgYTrcgUio9LzS1j9EG7YFbPyOYt2mmm9qHH:QjYxMlHQMqpxkIgUikLzoj9LwbZhmmmw","tlshash":"34d30258b5489c78e85cb63606ef7246bb5ca4fff513b2e4b0429979258f421ec3a21c","first_seen":"2026-06-07T01:37:22.724012Z","last_seen":"2026-07-11T03:03:08.378539Z","times_seen":4,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":321,"dns":2,"connect":93,"send":0,"wait":143,"receive":194,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/7097b554-502c-4e16-9597-c2e370be8b44.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/7097b554-502c-4e16-9597-c2e370be8b44.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ByEPgwwE40smXWPtwmMZhywo6e7HovUTUVx5qtM4YP3bzGUUjJfK7rB7ZegvaHMtE63aqHyI4je0Pay0UtZ1qBmh3L1OiGrq\r\nx-amz-request-id: BP7KENCGCRMM3SBP\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:01:52 GMT\r\nETag: \"43cb423b73977d67bed1d9e8d2efa578\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 73418\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":73418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 954x1500, components 3","md5":"43cb423b73977d67bed1d9e8d2efa578","sha1":"dfa78c525beb067d81ab2d26ac2497d4647faadc","sha256":"5c9eb417fff5c94e142133271d3a1aee3d8b5c3db04372dcd998ac0d50b64693","sha512":"805bfbafce10af05872d2a7e5d33f54ef24ceb7ff33767651e466d7603163dd907cc0fa0f6fd084cb764f6495a5ddaac01a9b26ad369711cae040c664aaf4b30","ssdeep":"1536:RNx41sQVsM8MdgknKbbJq1KV1js5ENUW34ndnQM:5nQSM8MdgknKs1K45GcndQM","tlshash":"9c73026215b90d07e2947df75e0a69625c43bc5e1c13b27aa9094ecee2bc470f5fb814","first_seen":"2026-06-07T01:37:22.725882Z","last_seen":"2026-07-11T16:46:31.670164Z","times_seen":5,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":663,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/b449c03d-0923-4bb4-8b4d-99c12f0fa17c.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/b449c03d-0923-4bb4-8b4d-99c12f0fa17c.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cWdGXj/cn5XhADeR+a09DkuC5D3Oybdx6/eeVuhH54aNeNRN4bUyZRL+t+J9DfstXXfHsVLYWTFWRUOQ6++x756R5VmT+T84\r\nx-amz-request-id: EZPTKVBGKJQ3YWA4\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:18:35 GMT\r\nETag: \"8df2e422b2246baa346b8f79049289d6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 168692\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":168692,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"8df2e422b2246baa346b8f79049289d6","sha1":"342ffbbe579af99f7a2e4098b041cbae511da637","sha256":"abed34b9ca5ac5801a92615baa6c3c56a6a24b6221e00b9e83f3bfdf840449e0","sha512":"ed5847fc414aaa4256d0b292981329fb0112a7876efc03f0ab4093687b74b0bb9dbd470e360e08ec7eb240b6c2af61edbd8c9397a17097465a7f4371f86c88c4","ssdeep":"3072:488OZluVc09oiqiAERuJlc+P0a4r0jTlMxwSk6eAi0z524c/:488609PqiwlRV46To3kt424c/","tlshash":"98f3223ef54995828d1b2fe614d1853600d452d8eb24dfabfdc2be332dca9c2e790052","first_seen":"2026-06-07T01:37:22.727843Z","last_seen":"2026-07-11T16:46:31.704495Z","times_seen":5,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":853,"dns":0,"connect":0,"send":0,"wait":112,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/ui-element.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:36.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/ui-element.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"79444-1780594103602\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 79444\r\nDate: Sun, 07 Jun 2026 01:36:36 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":79444,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (62792)","md5":"dd24d7c24c5f5b45f802824f54c77586","sha1":"1774023c8bee973bff8714fd2473aed5d9a5995f","sha256":"d98e659feec6b738fc9f9561ab6b39763afd2a8a0aed0d1bea56fec1c1eac60d","sha512":"98f0cb1b8961ca3161c691b5e15f0d7c4943925ca5300b6aa270ab42acdf5551d648d1e3aaf8ee51f79954626ecbea2237b1f469507225bd316ce3b53ad159d2","ssdeep":"768:tgh/+aULDeX424Nw+f9+fq/46/zlgbrsRLOaFcSsTfTyHW1kDENe4U7QuJmZZzE9:OWaUuXH4i+FmWzmMLAZU4U7QH7zUp","tlshash":"e373d6dcb385b07113ab20b540bf150bf33a7955a80ac1a0f252e4da7d7885da16bf7e","first_seen":"2026-06-07T01:37:22.73038Z","last_seen":"2026-07-11T16:46:31.699339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":494,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-core.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:38.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/app-core.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"617296-1780594104791\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:24 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 617296\r\nDate: Sun, 07 Jun 2026 01:36:37 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":617296,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58646)","md5":"9f322d1516d13f1f7fa2a5a2a704b1d6","sha1":"f1fa0416042d449fe7fb5354d4ba63c72fcf5cdf","sha256":"b48ecc98611f2d6a97408ad1140fe4ff5a2c3bf1ab4cf4edb4779e6a3cff9881","sha512":"c3c9b68564e5c90b87db084c189186f65d48454a75941649b17b6b72dfe03d0d8178726a21e3f73f834e9884c35847ed36f641d2ee5a36c8dc5fa5c58854f0eb","ssdeep":"12288:lJexQ3jtdz29evPU+92P1JwHbcV4EPkYEK3xLZYHJ349XD7B9FQcT/LYCk5FyrxP:Ztdz29evPU+MJwHbcV4EPfhxLZYHJ34P","tlshash":"4de44ac967d3f3b507e402d1103f327662b889ebbabe60d10699f8d934fda44811ae75","first_seen":"2026-06-07T01:37:22.732826Z","last_seen":"2026-06-07T01:37:22.732826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/app-root.e5aa1e0b.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:39.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/app-root.e5aa1e0b.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"104-1780594070057\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:50 GMT\r\nContent-Type: text/css\r\nContent-Length: 104\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6903fb1337139d76be5da8d0c2f0b7d4","sha1":"0bcc6110feb4120aac33d435b2b83eaf96ece12a","sha256":"b3045433c9f4db2ed73d19a3dc26b1a3eb2c843d9165c27fa6ff45f755d52c18","sha512":"787fe5a17b7a4b2cd3e1ec405744633c74cee650de11e98b968b44b97903756d2eaf329a3a73529b3222094dff78648a802489a29abf5447742e96f905c3641b","ssdeep":"","tlshash":"1cb012760541a122a8fa4735c8d34618bb0704359f830e1d72038f4c8359f1982141a0","first_seen":"2026-06-07T01:37:22.735457Z","last_seen":"2026-07-11T16:46:31.715879Z","times_seen":7,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/2b34f91a-8512-4cf2-8343-949c3f8cbf03.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/2b34f91a-8512-4cf2-8343-949c3f8cbf03.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MHpeENbwK6zy3dYjudM0wrW1XfG4WmYv/CtrJr9Kbp5r4yY9dQxGf20otKFx3Zz8LfVybAfDs85u/vSKDQzNzL5nO4G3AKnN\r\nx-amz-request-id: EZPVT8K2RBZSW4H7\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:52:31 GMT\r\nETag: \"94786aba2bef4a1d0f71147eb209096a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 205925\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":205925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1113x1463, components 3","md5":"94786aba2bef4a1d0f71147eb209096a","sha1":"39d0b8ad13efda269da4e2e78b28c1261200cc3c","sha256":"4c48f29d12ec6779f8223d3aaa87dad8fb069de198761256f6c9080cbef29317","sha512":"a57134b67312f1363eee3ecb9fb1c81e1ae1e67a523707a9dac534adcc019c78a3c59e5470f02fa9d2f97f237b8073df289815e9b4befe0444de988635b3c7d0","ssdeep":"6144:LWaKsObAT6PXeMM9EpTGXwhq79ddtNPXwBo:ixsxT6/eMMWpTGb79btt2o","tlshash":"1714129a3b2b6894c07f26bfc1f68456fa99cc27b28715b0de2dfc8c4a9075841d16dc","first_seen":"2026-06-07T01:37:22.737426Z","last_seen":"2026-07-11T16:46:31.670682Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":861,"dns":0,"connect":0,"send":0,"wait":117,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/ffb536e3-9398-44a1-801e-ee90a5ed74e8.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/ffb536e3-9398-44a1-801e-ee90a5ed74e8.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a53ibyvX7wLW+lyPJm8rvyrP7hd2dco2Dw67tUEl+yWa2UrlISwbEY9Cz5HfbOHkU2DcSzAljr6kD9S1J30CeUbAvdN51XtX\r\nx-amz-request-id: EZPHQSJ5S6ZJTJ9F\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 08:03:41 GMT\r\nETag: \"006c88c904079f9e2a9b6169714b4dd9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 221281\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":221281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 961x1486, components 3","md5":"006c88c904079f9e2a9b6169714b4dd9","sha1":"9507ace3267add04e1b3127c4e04fcde12c352fc","sha256":"2a5ceed35392c8377bd4427f8a96a47f43e1eaceb4cffb4702f20154065ccc77","sha512":"a0398551a8b5b80fb91fffdad6ec1a5d114415ae4ad0abed15571205fe98fb22db28e4521fa398749e7af8b9462bc9fee7fd1ce19e6899ab9f222a47f63226f7","ssdeep":"6144:HDTLT8HDaOMhmc/Ct1vq/w3XnThXIhmyt3:HvKaOA/CUwnd4H","tlshash":"6a2423bdaf141e34cb3012f3066c661fc8188f34eb5ec99079446a6f84d0a75dbaee95","first_seen":"2026-06-07T01:37:22.739387Z","last_seen":"2026-07-11T16:46:31.705671Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":866,"dns":0,"connect":0,"send":0,"wait":116,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right5.44b8369f.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right5.44b8369f.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"6060-1780594091466\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6060\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"44b8369f97d209638d14f43e1311cea6","sha1":"a0a4552bd9e8c5e76e852201f043e22523efd828","sha256":"95e5270a5cb760dc32383b20becb82c7e07cb66d89cadfaa134852841280ec37","sha512":"852d8c9352bad527aded0050836e7e81d8506f560bd0fa7d89d31a88e5852a07946de0ce42bc38e02df520592792160c26a3c2f2441bfc61a7a1f42728b870b4","ssdeep":"96:WwDgePNhAR+ZJwZ2L0NuE7wY9WblkOR3S74MH/dhNVYH4uQ998h6PQyOe:VDwROwZ2g0KwCWbxRCkMH/xVDj8hkQi","tlshash":"66c17d4104eff707f9e39139539cb33cd68b3c419909231b4e54b870a5db7915aad126","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.680376Z","times_seen":1965,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":247,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/pages-core.a850ad1a.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/pages-core.a850ad1a.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"18314-1780594069683\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 18314\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18314,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18314), with no line terminators","md5":"afcd423ba5ca4c294dafb2fad2d145f2","sha1":"56f8a19f2ffa124087e92302044a7a77374ad1ca","sha256":"c333358afdf3e03571dfe14bd396384628c0138ecdc5c28587abeb7d74c62e9d","sha512":"f42e2f3330b4bc7fec1baceb8117fd48396049f7b55be5cd65ad630a30e5b63e5c3d5156c15899bbba4c8d63f4f9fa96cef1c66354367e84f0fc4650aa614904","ssdeep":"192:Vb4ruXP3KkI5iPxaXtpg53iTlfFg9pCFiDoX1rw/C07K8XnX1+qFkV0vzX/NXN:kiPYmiTlf+id1rw/C2PX1+qFkV0vD/FN","tlshash":"108294b360a0a836f6fbe1697194f8a87185ca13d667c2edbd55602cc8c73e3927174c","first_seen":"2026-06-07T01:37:22.743022Z","last_seen":"2026-07-11T16:46:31.72012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/layout-ui.48a47f8b.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/layout-ui.48a47f8b.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"12238-1780594069870\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 12238\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12238), with no line terminators","md5":"e092c1365a47ee3218470411a256ea64","sha1":"2b009e494d3cacc12e3be028cb35cf4e7a46cf24","sha256":"1fb3f11330b5b318fdc22b3a489c5202f5364830072c37ea91f5badb956e6422","sha512":"25059007f41c3643f76def2460a18a9926bb1edaf86e9da0056c2496776ea7b648f108b133849c13afb80c10e4d408f2cefddaa7dcdaa154d394ea65f66b7121","ssdeep":"192:VZA1Zxj5g4SeE5drsCqQ6ljZISE5qYc2IQQtXQPpOliGxMT0GMWntnZ2InF1DwG3:q5guE5drsC6lwTIQagR5n/3","tlshash":"50429331f5663538a473e22de291e98c311cc502eab387eafe99721e85d77f30651a1c","first_seen":"2026-06-07T01:37:22.745036Z","last_seen":"2026-06-07T01:37:39.218243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/type/2026-02-22/c7655087-1c20-416b-9b66-2b6f7406dcdf.png","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2026-02-22/c7655087-1c20-416b-9b66-2b6f7406dcdf.png HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ZGz35WrYmIdZbnPggnmRZXUNJ9xca7ZaqBofONJus7H0WDS4z8+SApzowQRhOTWQUw6m1D2n1OV4cq8yqhVz+5wvbyIFOe9A\r\nx-amz-request-id: BP7PSFB3M1EZ9YPY\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 11:20:19 GMT\r\nETag: \"5a8141a1e3f9ae20e358558f847715f5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 204466\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":204466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"5a8141a1e3f9ae20e358558f847715f5","sha1":"f7be50d3868c793818255a6094e78053690db2e9","sha256":"620a101a1e114bcc50bddbec1e1bbc157276a7d86918c943589c479e1f824d24","sha512":"bebc62defc949b0295bbc48717a43e974dab98b90383e568eea78e58a503791c8c87473af26443e43eaf9154bdf4e4fa0ab7ec18b37b6d289ea454b3ece93a54","ssdeep":"6144:6n2eIy8lDUjZw6TiGDMkl8T4Ax0DSOyYl:6n2CjZnRi4AxeXy2","tlshash":"b61423bdb2efcc1a21695ad1d4719b7ce7b85db0d448343803714296cdca53a6ff0928","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-07-16T09:25:40.664771Z","times_seen":5041,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":598,"dns":0,"connect":0,"send":0,"wait":117,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/71634e4a-594a-4329-ad91-7ac1eed11cc3.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/71634e4a-594a-4329-ad91-7ac1eed11cc3.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8b+6BhIYGVnV8xP1TEDEqHbq8Dk4vB7T8/6yCCja8QkZx90yv8Q9owAvtsWZjsaTxUzIVSjmYH33cWJ0FKka1ToprlxObYlG\r\nx-amz-request-id: BP7V954A7XGGS6KD\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 12:48:59 GMT\r\nETag: \"2cdb27366cbecc9f6086939faead9477\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 165578\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":165578,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 848x1500, components 3","md5":"2cdb27366cbecc9f6086939faead9477","sha1":"5c083ec218ea9234af685f92bc4eac8e8f5e50b2","sha256":"2da13727034fe3078adac8eb4f98a69c05063bb5a633e1f80960a85f0d9d7847","sha512":"c3895d117e0ba50675399296a1c03918060b93ea62c7e818d58b7ae685be1fa2c90dacbdf9003b985b18e9842c6f12222cb63e1ec4f6461715cec886f8e34ad0","ssdeep":"3072:E9YkZKXcGsADZRABFeW41vGGIw1/DHU/pjg0Lf6O5L7u5YugKKjaZo3liXl:aY1DsADZ+FV41uVuD0/pTLDNeKjaZq4l","tlshash":"97f3133593099c77f32684bd07bb43357d8623697e0eae165031da4de923bd0e4ae607","first_seen":"2026-06-07T01:37:22.748061Z","last_seen":"2026-07-11T16:46:31.719126Z","times_seen":5,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":783,"dns":0,"connect":0,"send":0,"wait":112,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/collect/amazon/2026-05-08/81cca12f-3829-4a50-ae91-eff8009d3ae2.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /collect/amazon/2026-05-08/81cca12f-3829-4a50-ae91-eff8009d3ae2.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jiOIbe3cqdYAFAW8kIkd3/BncolxtN59LNuIhWKuD7QDcvdED5b5jOaWi0kAxlCw79GOGg+NP27Y+UR1npzyhOwJ+GVZ3cx7\r\nx-amz-request-id: EZPZTP73040RDZHY\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Fri, 08 May 2026 15:24:24 GMT\r\nETag: \"209852feef74175d184f2fe5b4e8c378\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 34174\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"209852feef74175d184f2fe5b4e8c378","sha1":"52eb3f3f8067433a1dad98638cc8cfcf168946da","sha256":"48a0b02ab6de7c6bd0456db62f80fba3cc08b797d45d1816a7a2516c3718faab","sha512":"f7d59cee6b4e5c687709d6ee80952812c0f317f1a5b39d1889c720611883eaeca8bfcc248edf06ef58bbb0c299b907331d217c8dacb866a54104d1064eb2fd3d","ssdeep":"768:iiRk2KSTQN7uqTxBRQ8fVW/fjGmPNoRcGkzp8ruCnkcCMS:i6bTmTxBRdW1PhWju","tlshash":"49e2e11faf246dd3e1d99b305307af142d9687a321df214b82544a872a68be1ffc2497","first_seen":"2026-06-07T01:37:22.750091Z","last_seen":"2026-07-11T16:46:31.697416Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":1049,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-22/ae938967-1368-4d43-b6cc-e2566822ad7e.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-22/ae938967-1368-4d43-b6cc-e2566822ad7e.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JZY+/gGme6H/SDhLIFPI20a2c9VcSYVf8pU2eAqhncDmomSK+U8knbMO6N/XBao6KfGXNoI3gTr37WmTOpXZdHOgTVti7VZV\r\nx-amz-request-id: EZPX574KH9HMAMHN\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Sun, 22 Feb 2026 12:38:35 GMT\r\nETag: \"26c0702274acfbbfb562e0f3e18cc065\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 80422\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":80422,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"26c0702274acfbbfb562e0f3e18cc065","sha1":"c362254ec2b5131c29a76672ac6bd7bf1540cfc1","sha256":"6aa831c27259acf709de01d0de7ac303068cc1c2c8b4317d5cc380ed73b86de4","sha512":"73f359aa153e790d580240b8d5cf3fd32dda8ce3ff3305f9c7ec9005041d172ec4921fcd5089e9f2a80e9b71819d833ef017ac2d99327a744670a12fb399b6d3","ssdeep":"1536:R764UShlJdWj4sXIrnou3KUPr397inF5WKSTCesoJ5Xc796feeMImCegq2c3mn5:s4rNcEToOSF556BXO96feeMImdgzc3m5","tlshash":"b67302a4644da679d8fd57bb9c15809a3d6afd8ec4a4e0e0523b4d81e87b2312c680bd","first_seen":"2026-06-07T01:37:22.753559Z","last_seen":"2026-07-11T16:46:31.695212Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":113,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/shoplogo.f2298094.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/shoplogo.f2298094.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"14650-1780594098150\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 14650\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 66, 8-bit/color RGBA, non-interlaced","md5":"f22980949230c688ba0c1b9304c11c5b","sha1":"ed805a451e522dd6078e9f55e7a3307a391200bd","sha256":"0616e0be23a82a4b936d024cb7cb99e0532b21999386257760bb16e329d1fb9d","sha512":"0937244e50d6964ad68adcf58804d0e40723e5b509392b2bf7a7eb238359da53c8d7f3c2fadf3f18695c55ba10a76eca877081ad6346f9452f268a2275e0e6f3","ssdeep":"384:RsQKUargNfMlWQvF2XoNa2BYp2ollMDzmFENrK7iXil:iQKUYqfMl3F3DYQoIGSZ8qY","tlshash":"2462c01fa3681d728f8c26263e811ec07f574387609efe1cd4168c7ada743a1467a4aa","first_seen":"2024-07-30T16:20:20Z","last_seen":"2026-07-12T18:55:21.629307Z","times_seen":621,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/entry.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:33.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/entry.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"4608-1780594107003\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:27 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4608\r\nDate: Sun, 07 Jun 2026 01:36:33 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4608,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4608), with no line terminators","md5":"b4b67bb0366519508fa1a0dac582bfc7","sha1":"28563c537932712ce06457ee576966ec42472e09","sha256":"cd1d6943773f74160d66042bf585488063a22a51b2bd5a48e0a367326aaea31a","sha512":"42245191903986096e9919e07f6072b2f4b16564a8d16e6ce8ef412fca2c609a686ac741695a415d11503f8fd7aa1b621497d77d4de84cdbca52457551ecaeb7","ssdeep":"96:DFZbSFm2cSSFm2yKJSTqBhVY5SUZkjLIL8wjFO24SX6wR4I:G64TqJY8Akj8jEM6w+I","tlshash":"439194ba3150fc7a85aa146b701ffb16b6b63d321e3d5d20cf6dc1649d38e80268b764","first_seen":"2026-06-07T01:37:22.75672Z","last_seen":"2026-06-07T01:37:39.240925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/app-shared.32a5a438.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:38.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/app-shared.32a5a438.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"19101-1780594067877\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:47 GMT\r\nContent-Type: text/css\r\nContent-Length: 19101\r\nDate: Sun, 07 Jun 2026 01:36:37 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19101), with no line terminators","md5":"102e3f71a7bb760662f281870b50903d","sha1":"25c8e4aa80bc7dff27704b921b87370276efd8c9","sha256":"734da0b97705d1f4487e3700701d31c977339bdd1785b721aa63ec01bc17f6e8","sha512":"d04287838e30c4816e0fc8553e46d897c871f953f2e85dfb009e4cb7447c46cda78d4832f7504a7b8a2ae8fa2d0888471418e512a872335cc27105d0617f94e9","ssdeep":"384:CKHc1gNGkhxHzniCKMYOAsaOxlnseFS9oF1/ID8cDfD+DWDfDWDdD5djThh+1:CKHc1gNhxHznizHO3/dF1Jdn+1","tlshash":"b082d5f2f135113eb43294bba9ca54ecbc89f009e7b6d29aff9c7526c4c5686053024e","first_seen":"2026-06-07T01:37:22.759058Z","last_seen":"2026-07-11T16:46:31.692826Z","times_seen":7,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right4.d4ec046d.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right4.d4ec046d.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5221-1780594083271\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5221\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5221,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"d4ec046d8c25c5dee52c5af662080f75","sha1":"896fdf6b222c106b1d020d0acf31ee9c26c88684","sha256":"99f6a1f7108f1abf56f20cfaa1a2186185f75dd1c2679ab934dfcc78a24d1a46","sha512":"8154278b83fc24b0fddd51d9b2cbd209229d8e7469f2f1871f76ab2194aea26e95e65f3d54273d72573ffa0a0f23ecbaa85b27582a48a345ba1889e96c125fb3","ssdeep":"96:WwDljepRFJvH6a0JgVZYW4OZRN/BF5Dl46b6OzaXg4s0uoTU61j5Y:Vljep7h/0GZf4OTN/LfHvzaXYRoTS","tlshash":"0ab14b325beff38de1f34634096db2056d5afe1392a15bd385d15ca060652afaea1180","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.684072Z","times_seen":1965,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-element.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:36.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/chunk-element.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"807599-1780594104438\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:24 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 807599\r\nDate: Sun, 07 Jun 2026 01:36:36 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":807599,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64709), with no line terminators","md5":"08d1982af6ee67fcb706319a76fd4e32","sha1":"839c4aec3de1e0bbf0a421f2fda2130abdef715d","sha256":"9543b352cc086d018afd9c9fbd89eb3c600644e46cfe004bf3d63269f0fcda07","sha512":"38706f08f22a3f995c9362e72acc20a7f2b49dd563dd5ba1a57ba2b53ea818312768709ceb6b6aec431e0013ea77933c6c74b4256b154cedc7bd802654ebb22f","ssdeep":"6144:klMa5rLwLTUVe2as9+mCtleDOUFcFeiIW8CsjIU+QTBdFelE4E:kvwXUVe2axDmOUGtI8QTJelE4E","tlshash":"0b051a8d72c5f57147a360b0106f240bb33b2eac6809809cb675e8d96dbd909626ff7d","first_seen":"2026-06-07T01:37:22.762377Z","last_seen":"2026-07-11T16:46:31.672146Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1123,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba991c821ea8d8d5a4a9cc15a9b1cc0b","sha1":"d8212315e76761d4996eccd95f221bfb14725615","sha256":"515617e19fd53beeffe84c16ac268dca86a10be8f39ee0cbfeff9763e08d190e","sha512":"b41a6d9956084558bc2ae002c06098c0ca6a3f88ee6e2cbd6abd8e1819e6233671ec8d670ecfa1ccf7bb7235fa2d6ae6aa1cfffcedac6334ae72edbc80ea2422","ssdeep":"","tlshash":"712100471bdcd4551648b782cdceb984d2ac735a9ca84e2ec8daee1c9650f38255e313","first_seen":"2026-06-07T01:37:22.7643Z","last_seen":"2026-07-11T16:46:31.727564Z","times_seen":5,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/add06037-4107-4407-8c14-b75a326e7a33.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/add06037-4107-4407-8c14-b75a326e7a33.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xgZkuyXzFNovhRJzshhDzVlYu4KHEC97orne50ZyvPhG2U0k1+U5BS6+PnbWTvIGLuOvYjRoHx0n9PzlEqBBGSa7ny13iBVo\r\nx-amz-request-id: EZPVXFPF6CZEQ8RC\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:34:02 GMT\r\nETag: \"b86121dc6bca49599b8b9711731af724\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 461827\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":461827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1265x1500, components 3","md5":"b86121dc6bca49599b8b9711731af724","sha1":"d496709c1346acac2cd03e878d123ee7a392e72b","sha256":"b7c74242dd32c433e29b72bef471123608d5a335273eac56ac9bc1cc9403a0ae","sha512":"973e6381d14c22f589a5f3bed88bf30e3c38862785078babb578f953621004ddea644cff8029e83c1469957d30441f162001d9b9d14737f8a5a19b4bc2d35e45","ssdeep":"12288:9DilKjI8MIKrBvyacIl1/YRJc2/h8Zl5BKBYCaVsdRWnat:1ilhcafkl/h8/5qaSCat","tlshash":"c7a4238ac7369010e24893b191dc85a7f84acd9b30c29c444da6cad7f7f7e2672fd861","first_seen":"2026-06-07T01:37:22.766416Z","last_seen":"2026-07-11T16:46:31.733235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1129,"timings":{"blocked":850,"dns":0,"connect":0,"send":0,"wait":178,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right2.cc786c17.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right2.cc786c17.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"7713-1780594083837\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7713\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"cc786c170d1d6149749d10d1c582b823","sha1":"e457775e891371693e2917995d61c0aebc469232","sha256":"2542eea6cbcb84492d4c00cf3b1d9d8519352b424f0cdff53503e25b61b48a06","sha512":"bcca4adabfe737eb7354aba0b5808df7e2be3d7fc3073e436abfc45953d8e17515677a9ce14d9b7a2745c680048e862375274c79f8e85f1ef53fe21df09f070a","ssdeep":"192:VVN0t1U7czDKKmtGPnBAZkdlpo3XUa97UggVBPGBbA:Vu1IcqtGPnBmkjp4XzwzBPGG","tlshash":"71f1afba358c2f53fad13db4ac9c72a27b242e3b5941c35f80f56f6470be084106a61e","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.712286Z","times_seen":1966,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/fonts/iconfont.0080bb9b.woff2","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tk-globmall.top:42999/css/app-globals.d5110eb6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5212-1780594071086\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:51 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 5212\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-17T09:36:56.914644Z","times_seen":8127,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/ff3c0a96-2887-47ff-8cd4-30f9ceb59c3c.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/ff3c0a96-2887-47ff-8cd4-30f9ceb59c3c.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: G8tEkWjiZj59Umiz01H+2z3w4CR+IHp9bSPvT9df0o59ogSk8Ve4wRqtJ4fqx+2RaPFJcBgO8HCL0q8a8B9y+yLhV9M6tnEh\r\nx-amz-request-id: BP7TS0NPMJWRV1GC\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 20:39:15 GMT\r\nETag: \"e3a81bd08126035ad4dd593c8798b898\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 57224\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":57224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x864, components 3","md5":"e3a81bd08126035ad4dd593c8798b898","sha1":"306e5c11ef229db9d5fc4a72a12d472da3f96e1d","sha256":"6861c29ccb029bd9b5c728afae62e5b52d4b9f7327a7e40db0830d3863caabff","sha512":"4df2775311fdba9db4f7cac6d24b602034fdcc88b42ccbc64db5434496f163805fd2c3c6b1ea981f8b2acb5433f0bc0a09cc9bc3c8cdb92a7aa014f8939c7835","ssdeep":"1536:2QYM7EbiFBXwN77IMgSgnfuFi2ynhVMgC5fc3cTESBT2:287minXwh7IMgSYWUVGgCZVTF52","tlshash":"f143025c4d7aece2c8bb0cfe7faa71ca064258676391fe9ec34649444d2e7061c6f464","first_seen":"2026-06-07T01:37:22.771131Z","last_seen":"2026-07-11T16:46:31.713892Z","times_seen":5,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":300,"dns":0,"connect":93,"send":0,"wait":137,"receive":95,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/2bbebbf7-112b-463a-95d6-134c29225938.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/2bbebbf7-112b-463a-95d6-134c29225938.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eFhvhvIu49WVsmonJDRykO/MN3ivclvEE/1Jcn/bO7NWMAqFQmpPdyuDJa2evSHgyRv65F3lxyr1HwcljKMexIS1BgircXCk\r\nx-amz-request-id: BP7J97RSXBE7XH3Q\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 13:07:32 GMT\r\nETag: \"beca71351977a1af94c6a528bdf43c6a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 38661\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 617x793, components 3","md5":"beca71351977a1af94c6a528bdf43c6a","sha1":"d8c4b5e385bdf31704d963835c22af5053f6f521","sha256":"ebb874bf120d1ab0dbd372bc4c32a3bf72a9d67af38d9ddbe95cf00bd1a55f2c","sha512":"e9e5518dfd76600709ec38b65cb61328f3c54e7392b9469d1fefce65573c0fadda12985a796c0347a4f7b852fb7a1d5156b16f4d329b8d7e641e04612484a4ab","ssdeep":"768:oourlwuUPfmSpeu93xz3rzayCpKXAozKoPy6rVRUh:FFt4axz3reyCpkKT6rVq","tlshash":"9b03e17b0e81ee6bd057c27ea90e01742f77e4ae10a0eb9e6f11ca75a5141f6b310f84","first_seen":"2026-06-07T01:37:22.7731Z","last_seen":"2026-07-11T03:03:08.395395Z","times_seen":4,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":553,"dns":0,"connect":0,"send":0,"wait":137,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/clogo.87afa62d.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/clogo.87afa62d.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"4140-1780594100283\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 4140\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 38, 8-bit/color RGBA, non-interlaced","md5":"87afa62d9d61ee86c68cf424b86676b9","sha1":"e746158989116f63f97011022db1d359254aa474","sha256":"8ab038ab39e0d09736b30c085dd2edbcc70e2d2a655011ab52efdf6eef1a5070","sha512":"b505b0e6f9d064faddd598c6fa0d59a177f080bf6d655baf08c1f7dece3786de295ef6f9fa2d6dfc1bf60fdef4fba4780ba210c0c23ab17df1c9397a70d8283e","ssdeep":"96:jS9YhQjiNC98LoBVyma8DzAjVRoqP3Uq3ni8edM3zY9xnESue:jSDeswoBwsDUHRydM3zYvMe","tlshash":"32819da331ad84a9a0b3cc3fb78a042ddba6f6650a1b835b94678c1d11cadd30a29641","first_seen":"2024-07-07T22:26:52Z","last_seen":"2026-07-11T16:46:31.692243Z","times_seen":1182,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:42.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":222,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eb928f7963c708a00aa0d81f5c75cc14","sha1":"201f911dd987e342a0d9fe43b9d447b8cbe585b5","sha256":"f1a96eb7886c759186a116a73f1ce64d06e265e6360e63b06e02be2e1b12957e","sha512":"9d3a509498cf0f39c8c818433c77212f52830e16a5713c5c5dfddd7e491a1e349ff2bda82b03c141dbe5739e326bb2c20558fee222c042c97afb46f372ed31bb","ssdeep":"","tlshash":"26d023e0155c7890c30b87c51bef31158d19b565885725356c5dded441343b1bd10d65","first_seen":"2024-09-26T02:55:41Z","last_seen":"2026-07-16T06:00:37.067445Z","times_seen":2514,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/css/chunk-element.6b92dc4c.css","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:36.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /css/chunk-element.6b92dc4c.css HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"211155-1780594068497\"\r\nLast-Modified: Thu, 04 Jun 2026 17:27:48 GMT\r\nContent-Type: text/css\r\nContent-Length: 211155\r\nDate: Sun, 07 Jun 2026 01:36:36 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":211155,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e1ec7b3d258707dfa59963f29e6f8e75","sha1":"4f5bc4f0fe61f591e28ee36aeb7225face58fdcd","sha256":"dd1f9346550174f9e13cf5bde56e170cf73b9b703a46f0335435471104a3aba0","sha512":"2c4dc449a988f588060850b8d9cdd6eb28c00c26e0b17d938f9904f7331979d66f74b806a5f457dc13d5a3593ca04bdac41699603e3c412e241b82ea715aed14","ssdeep":"1536:w28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehB:JtKw/27eDLL6of","tlshash":"0824a710db17247b622bd66db4c0ba896f24c363d8725b3bfd95741cc6e64891223e1f","first_seen":"2023-10-20T10:33:29Z","last_seen":"2026-07-11T16:46:31.712796Z","times_seen":102,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-globals.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:38.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/app-globals.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"645635-1780594103037\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 645635\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":645635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (53660)","md5":"cc8ad0da7f27959361b2b0c169a359e8","sha1":"a4ebd94f8fb9a7affe8f14800aa896e59b7ee4ec","sha256":"3a3e75116d41bb95ee6e98fc94df2a7ac5a06d036579a5f62d9f193e6feceadf","sha512":"462c544182b4c89e48a63a8e52b058a916d59c6993a7e7f7365d5811498de297ab47527b1ea09cb150151276fa2874a99dc98ce0a94622b37b89294adb7c37d8","ssdeep":"12288:m9wSDZmQtdz29evPU+BOpkYEK3xLZYHiT6r49XD7B9FQcT/LYCkPEsir5CSXR0lW:gtdz29evPU+BOpfhxLZYHiT6r49XD7Bv","tlshash":"66e48dfc22d3e3b406d531e1542b677633b989aaebcdb15e06a9e4c530ef5d4c013a29","first_seen":"2026-06-07T01:37:22.779659Z","last_seen":"2026-06-07T01:37:22.779659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/layout-ui.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/layout-ui.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"743785-1780594107571\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:27 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 743785\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":743785,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37973)","md5":"6e1a210ff8de4fa3eb24a39655d1497b","sha1":"a54f44bb68aee745aa7777fff8088a61e726f30c","sha256":"c698e60f19a481c46dc007716bd5cd45cb69053f04d39e74751ad7cfed83857a","sha512":"19f6ebf363708962d91178f2aa030d7a3af2247f3daa202955619202ffd60ba75fe2b47ad205dc02d1f44ff3bea0e505746a44d89ffce78e6a82a03cdbac257f","ssdeep":"24576:U7M76tU+BOpfhxL2549XD7BpLYC2ROFpBYSXR0l8dSqQXTHtpHFp:j76t58Fb55HBpclMFX9BZ8XDHtpHFp","tlshash":"10056b9a63c2e7b447e503e1243b31b6127849ebfafeb0d61399d1c534bda44811fab1","first_seen":"2026-06-07T01:37:22.781451Z","last_seen":"2026-06-07T01:37:22.781451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right1.ea8f0c33.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right1.ea8f0c33.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5401-1780594094997\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5401\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5401,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"ea8f0c33d3900db3be98c332c0c2062d","sha1":"74ba33afcb75c6a95340f43617a273b8068689b1","sha256":"a4b10be0e88ef341a10520d1489dc02f3898c5804bbe90be6a94bb872b7a8a76","sha512":"fda39ead697cf13e4b4f116a91437f276a61266920c6be868fd31fc50cbb1f0f50d64cf7c44851794ae7313aa8eea47a842d96101ef7868fa691d212ac34b006","ssdeep":"96:WwDlVF7N/K3pYckSGRTT+PS6rIqVUhfvvbzZr/wbSCvG+9Lh7nAb2:VlVFZ/KSckS2TT+PS6WpEm6Jt","tlshash":"9ab18ed2629df395ccea6bb19e8d7fb2660163cfbf210302a84102b654bcc8fd0514e8","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.732672Z","times_seen":1948,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/selle/2026-03-01/0811966f-51cc-4222-9244-bad4c8a053f9.jpeg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2026-03-01/0811966f-51cc-4222-9244-bad4c8a053f9.jpeg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ak5HEtBAMQ5ZYbQq8MzMto6TdIzYm+y5C0SCXMB6f4PdFYGcyZnMcJqU4OZDJtGDobT4zvsJZ74Jr7QNGBIIsInW6qK9FLXE\r\nx-amz-request-id: BP7Z61VGCAKSHR2Q\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 01 Mar 2026 08:04:47 GMT\r\nETag: \"51f47be18193ba58969dd8b9049a67ec\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 8668\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, datetime=2025:03:13 11:51:39], baseline, precision 8, 197x199, components 3","md5":"51f47be18193ba58969dd8b9049a67ec","sha1":"40c6319334a00c1ed404b275cc1bc489a533c129","sha256":"d2463a808f21b5efc8f5ecd1cea4bb497639626ec651b53cf0e35ea71957010e","sha512":"db22bb01fe091485a695c9f390cdd909259569c451b12722461728577d9e424bfe06ea9558c0586f0b71ef9d5caed54a0f9348ba31c8fa3eefe02059cb119e4a","ssdeep":"192:ns1hMH3Xt+Zr5KhQjiqWn3TvmGuCGrCQmRVD:svgXemQjVW3raCpQmRJ","tlshash":"60023a2aa7646314e6b8a2742c430e070f5a757d6dce56bf72c3055bcda1774a42f02f","first_seen":"2026-06-07T01:37:22.784061Z","last_seen":"2026-07-11T16:46:31.677955Z","times_seen":5,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1153,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9ce7524a05cbe63413c8d27c9911118a","sha1":"4531dee66c4ae1925095bed10965a224c5ec9abe","sha256":"8913beea771f4773c924eab9dc4c22a6bf77ae26b0ca8a7935bfa73b7f71cc7a","sha512":"5983b49af18c6bbd018801bb12d9fcd16590fd62ab27392b029c3e4569df06e944ddf90605021a3628df28dbd9728363e97880003c2a0b52c129e88208fce92d","ssdeep":"","tlshash":"7a21eeee1bf83c2ca359915034436d8ea0d0702adef93e9aa5dcce0061a9ed91ac6420","first_seen":"2026-06-07T01:37:22.785461Z","last_seen":"2026-07-11T16:46:31.685582Z","times_seen":5,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/092e8345-e32d-47a3-89e7-4dbd0b13e475.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/092e8345-e32d-47a3-89e7-4dbd0b13e475.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JklYGCre/NdX3ate8cPTffau8iJMu6sadvuoJ1h8ZEKjfPfRzeMWQZmWwr6RPfuabi/g85dI1GMi3BOSB95RRoGDkKAG6rt/\r\nx-amz-request-id: BP7K1V2SAST86AVQ\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 20:33:34 GMT\r\nETag: \"68c30bb2f1d24ade82fa3d8db099530b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 149912\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149912,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x949, components 3","md5":"68c30bb2f1d24ade82fa3d8db099530b","sha1":"fb46997219a8f6f2f228c01ac244d37874247caa","sha256":"dc816f63ed98f11290df0579af6641aabaf379371f9b5d5beaac1e240a0c871e","sha512":"8b4c703831a576413024ba3b15cbeaae3531550cb6e1870ef1384ff76dce8e03073eb544cda04ea06ca6537c0574cb3c0075ad78a4ec718044bc7209edd30797","ssdeep":"3072:Hvm0N92xaIq6csVtSjkNSb4uv4XLaW50J4le7v1/QX:HvLN92nRcs7Wtb4u8WFJ9w","tlshash":"dce312b232593502daa92bbbab7c7e340e925707e063f83912b0474693f77487eb4457","first_seen":"2026-06-07T01:37:22.786999Z","last_seen":"2026-07-11T16:46:31.675759Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":344,"dns":0,"connect":93,"send":0,"wait":121,"receive":192,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/405e0247-1dc9-46aa-9ac4-1456c00906e2.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/405e0247-1dc9-46aa-9ac4-1456c00906e2.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cOEaOsKxVDxAvD5lHglwctRrgG4Ul/Y1ybyY102MdSdVtY2PeCDlYkyYSrwt4wjhXQ1BsKbB319Aq+T80FoP+5q/SXs7LfOn\r\nx-amz-request-id: BP7HGEP7N3JB7XBV\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 20:35:52 GMT\r\nETag: \"8bc5fe3ed2dad8f871a3737d4834aca0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 206793\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":206793,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1489x1486, components 3","md5":"8bc5fe3ed2dad8f871a3737d4834aca0","sha1":"b50fc00f4fc16d746ecfb769f7caad3acfdcf7ac","sha256":"2328168b3aa304a46cc3d3cb9b9322f1d561106b4bb4d7b363c63b0c13b6407e","sha512":"82f432646ede03080c3e17987bbb0ed857a6b29b22809464614a609e0bb92a077ef4c95c390f73741a3eb76c25caedd9e584072b15d42ff73ab36c8b1e24a129","ssdeep":"6144:c4QJN+o6PxEpVakes3NnpOgxK1fOkNYkh5j:kJYvKpVakJ3NnMgshygj","tlshash":"351422ce6743027ae04d1b396133aa311c57abe2d3729037af1630af9911a1fadf554d","first_seen":"2026-06-07T01:37:22.789859Z","last_seen":"2026-07-11T16:46:31.70252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":358,"dns":0,"connect":93,"send":0,"wait":136,"receive":280,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/b9a54535-b656-4dfb-890b-8e884399cf65.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/b9a54535-b656-4dfb-890b-8e884399cf65.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PAJlw3yJGZ16TxBieQo0OR/X8V/FaOvHAhpgkz3z6dV8q5vTk9xw8ZPD4mqZHH1OE+mhW/O72GYil6Z/iVRj99bjIPE4l5b7\r\nx-amz-request-id: BP7X4AX2FJMEK7NT\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 06:56:13 GMT\r\nETag: \"b8cdec2eb9d8ddf6ea7294b0df42e40a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 54608\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":54608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 539x946, components 3","md5":"b8cdec2eb9d8ddf6ea7294b0df42e40a","sha1":"eb955b46838a69e6c579a42748904076ce210d2f","sha256":"c2236e22b47a52d0e5627538308b9fcd3c05f59eb680073b68ec2b3740b264fe","sha512":"b502a8a9da3eaa21ac54c3f629d858238af7820e80dd3439422bd6fb08ac28c6da81b99c7fdc57a23da2f6037e7b7b5c8de094301cba28b71416aefd74a1d33a","ssdeep":"1536:/QLay6TCaS/ZyWEzWOL3Ep/v9IA3THy7Dkv5vnB:/QCCaSNEzrT4+F7DkvxB","tlshash":"1433f18a41fa8172d9da5d7312f2fc901715896c081f13837a477354b07e788aeb7f95","first_seen":"2026-06-07T01:37:22.791737Z","last_seen":"2026-07-11T16:46:31.721298Z","times_seen":5,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":644,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/52d41c16-43d6-40e1-a5f5-ca0124a9174a.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/52d41c16-43d6-40e1-a5f5-ca0124a9174a.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Z008OCAZDV3qzJnkABbEP2My9oUqNk+O2K+mYQL3Z6RtEC7myDdTMOfNgIFX4wbAoLVSxW/OpsGxUXuxLGrXmL/iZmtdGQiX\r\nx-amz-request-id: EZPYJREGQMZ6QYJS\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 08:21:29 GMT\r\nETag: \"7d11c96df40ee9790fb7c1928691ee5f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 172995\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":172995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1058, components 3","md5":"7d11c96df40ee9790fb7c1928691ee5f","sha1":"7dde9a8eb631f609c8abe451a4e8467d4238a1a1","sha256":"f03d16273dea1ecc120658af9d1c976b794b611e081c4cfd60709584e36c6f18","sha512":"8e5d734edebbf872273974844bcda06f6486097aa95a6f0f154a4724b467aea0f389e91fe0a1b12db69a598ebf96ab2c75d31e9acdca1046678c7e6d607bf321","ssdeep":"3072:fQsVKr0HOdh7XlfGHiOSKEuzeuVvHGGm0BztCa7xqNvK49yj2YBrYpDC:fQR5h7XU9zdtHwaSv62YupDC","tlshash":"66f3121f576688cbe7ecf27587044387720e0da6ebda860796e41d75be354863ec308a","first_seen":"2026-06-07T01:37:22.793523Z","last_seen":"2026-07-11T16:46:31.72245Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":945,"dns":0,"connect":0,"send":0,"wait":120,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/71fa345a-dbf5-4093-a551-4f6da496a02c.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/71fa345a-dbf5-4093-a551-4f6da496a02c.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2XeU67UtdiKt6osVa7syPg1peHB7G5w9M/TuYUyCeJPNSN4fFUpnXMXhlFCFCaNSdXaJICyEvBFPM5OUw01gEv2G+7355GFy\r\nx-amz-request-id: EZPR2MCR2WRFA7FA\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 11:30:06 GMT\r\nETag: \"7dba8183243e778b7576f34719af9368\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 97151\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 967x1500, components 3","md5":"7dba8183243e778b7576f34719af9368","sha1":"df8096669a230faf42318dc85b9f49b262b7afc0","sha256":"c8773f2bb770da87845d4bc00968ddc67ced213a99b193a46b9141943a389024","sha512":"c5b257444b8b89802e6b37bb482c799d4b0961e4fa0a96c3642399ff8389e7921bdf8f0e44d8dced18d605553a4c8075d82ad979968cd11d73189f4d776ab69b","ssdeep":"1536:3w5pop44M+SUfT64uyt49Hn8iNFMytDhdufmgDvsWtE5A1/Ot08nG3SyulINSpLZ:3wHopM+SUr64uyu1nVNFrtDTu+gjs+Xq","tlshash":"b293027ec7d084cac7f567b2529fb34e62b3d184f2ea3bbaa0c1982e56d214c44c19c5","first_seen":"2026-06-07T01:37:22.795437Z","last_seen":"2026-07-11T16:46:31.687576Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":1060,"dns":0,"connect":0,"send":0,"wait":112,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right3.2623b6d3.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right3.2623b6d3.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"6227-1780594095559\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6227\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"2623b6d3fdcdc3cedd05dc18ae066b95","sha1":"87a496d16deb4dd95911f7a13d1a1aa1406ea0e7","sha256":"442cccd091f86ca0e04e6968e5b8d8a9da4d0cc44d5db7c13bcfc6e8dfe1c8e7","sha512":"875c70082bca2afd94f6aa97595c77812a9fd4d6619f09c71a7b18c35bee92b85ab668820f1d84638446c029996fe60b0d24211fe7a40e275338432e0ba78dc0","ssdeep":"96:WwDXOIcRS6h49YajeysjKSB6uBcHWSNihodeI2dqmbYjdAX1skAURqNmABBq189:Vlcb49e3j3L3tqde1Rsj+skAWaBQi9","tlshash":"6ed18e3127ff975ce0f635b7061d7a467751195ccaea70a1100c72993a78470a86d3ba","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.723401Z","times_seen":1966,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":80539,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c281207793d4429e6c993c3f93a54355","sha1":"2b54057cfaf4ae9708302925b63562d8d55dc078","sha256":"f008a921924299dbd7b38286ae55fd5232820d1ccf4eef8215a0d695da325619","sha512":"a8c6e0fe2a9ee57130d4033fdf6dac07836ea865c78ec7fb6ed7d7e7f5eb5bdbea66a2012aae11cfda8f6229297372969582a7c6f49fe156613ee9e8c34b0918","ssdeep":"768:2c4A/ZTggBBy0oieQmy6fRw0RUC2+kTB+h6gB+8MrmkXpZfvCRyGxu27hfWcO5Uo:D9iHPfrgGnENmxPJcKas8","tlshash":"137363f24fe810376bbe51a154b57ecd98bfb03b99b08fa6a5d8dd0534a8cb51d81c20","first_seen":"2026-06-07T01:37:22.717107Z","last_seen":"2026-06-07T01:37:39.18653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/i18n-locales.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:39.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/i18n-locales.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"724869-1780594105570\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:25 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 724869\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":724869,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62364), with no line terminators","md5":"bdcfc314a804312666c94deac2890360","sha1":"170cce563d393efb2c598153e572ec2ee3d9194c","sha256":"1e6fbeeab576f27f09d424e0e453eaba0ae925d562ee71cb069589f8625bea34","sha512":"f056bf4abe05325aff702a0b91b9e874c5d4130bebb62f01cb8acffc4c870af6ce0bb3686394549832c08c030534d781c19d6223b424e80d709baaf5032ec2fc","ssdeep":"12288:czDLTbhAhRErKDg1bCZsqqfM0TnADCvIKH3v/99QQ2pnKwhRnqkFfSstGRJhz3lr:ghTb/vRt/99Spnp4RF15","tlshash":"a415f749d7e793980eea31e138463bf12b64c5e5c7ee6c2f4bb8c29011feea0215d591","first_seen":"2026-06-07T01:37:22.800053Z","last_seen":"2026-06-07T01:37:22.800053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:42.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":94,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e90f0a09f722d39a8a29fd3f915d61f4","sha1":"95f1881867b610ced5ba3918a0a52f82c3e8064d","sha256":"e88dda3f5788aef349adbaf8f3004cceac7f3a2b3853c8bd15307f2fabfe508a","sha512":"83ac18ec05232c9e3fa298e195c5e71119a5e08751d1256343966e4ff3b387d85895ca09be6b84ea48d19a491096c86d3719a9134b9432c09d248c623f984e83","ssdeep":"","tlshash":"f2b012d0791e94170497208cec6d2924a50f515b44c08d207b88531450df06f00040d6","first_seen":"2026-06-07T01:37:22.809605Z","last_seen":"2026-07-11T16:46:31.686635Z","times_seen":5,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/TikToklogo.8798ec77.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:42.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/TikToklogo.8798ec77.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"53769-1780594093813\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 53769\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":53769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"8798ec77b24780c54023161614eee12b","sha1":"59414d9684c64b31a7378b24365d62389d59d629","sha256":"fb1eb66b616065513f97f8b98543417af87109502c53066dd04352b7d070ca52","sha512":"235cbab437385d21a07a1658f1c7cd704e4656a418939b991df8635f4890fb82d5a370f57962b3f20b29def52b73fc90319f3a554553962243e9e59eff5e2a45","ssdeep":"768:51gmL9Qd4Hey09dVBJTcMaFszMQSyr0zHnkk91ncR9JsRjYmrkDDXizWF100bcEp:omL9Qd4l09dX+MH47kx++/D7YObO8gA5","tlshash":"d133d00ca28ac954e0024bdfdef68f1067712d1215d79796b02dfada4c94f4beea35c8","first_seen":"2024-07-06T16:44:42Z","last_seen":"2026-07-14T05:43:46.194599Z","times_seen":601,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":80539,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c281207793d4429e6c993c3f93a54355","sha1":"2b54057cfaf4ae9708302925b63562d8d55dc078","sha256":"f008a921924299dbd7b38286ae55fd5232820d1ccf4eef8215a0d695da325619","sha512":"a8c6e0fe2a9ee57130d4033fdf6dac07836ea865c78ec7fb6ed7d7e7f5eb5bdbea66a2012aae11cfda8f6229297372969582a7c6f49fe156613ee9e8c34b0918","ssdeep":"768:2c4A/ZTggBBy0oieQmy6fRw0RUC2+kTB+h6gB+8MrmkXpZfvCRyGxu27hfWcO5Uo:D9iHPfrgGnENmxPJcKas8","tlshash":"137363f24fe810376bbe51a154b57ecd98bfb03b99b08fa6a5d8dd0534a8cb51d81c20","first_seen":"2026-06-07T01:37:22.717107Z","last_seen":"2026-06-07T01:37:39.18653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":330,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/wap/api/seller!list.action?isRec=1\u0026lang=en","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=en HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tk-globmall.top:42999\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2569,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e21bcc41bc9434735f5a309be60a914e","sha1":"cc135253428647a3e007d97701283bba3f4dd87d","sha256":"308f01fc39d030ad33567867218757744613dce174fa11173cf276dcf92eb89e","sha512":"7fa337970a642f27a43a50669d81e9f55e2813b9259c0b1a064e5edcce40c0526c9d3234715db1d2a1af2b63f3bf71d9a586cb1dcbeb5f6a9b1516d1ae3e73ca","ssdeep":"","tlshash":"b6511d44b9193eb29b1e6d562c037e87819c219b4d864e70ebdccf1826fb9b5530e521","first_seen":"2026-06-07T01:37:22.812007Z","last_seen":"2026-06-11T13:27:57.623185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1338,"timings":{"blocked":518,"dns":1,"connect":249,"send":0,"wait":294,"receive":0,"ssl":273},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/13158061-115b-4e9f-a130-4a1ceb10527d.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/13158061-115b-4e9f-a130-4a1ceb10527d.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IazW/ZOjn/Udqg2lQ6niBM1ClVPKCtoKFpKn7WIIatqdtd8Mda8+KDuLy0SYE69VPmVJogfFZXZdLERoutXb+/fBiqimIohw\r\nx-amz-request-id: BP7H0YAH6AQDY28Y\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 20:31:59 GMT\r\nETag: \"805d8208576070c9c30128c4d99ab0c6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 161281\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":161281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1296x1246, components 3","md5":"805d8208576070c9c30128c4d99ab0c6","sha1":"cfc63e8bbd2cf0a8df64b0177e3cdc9283ac5d44","sha256":"be0286600b3f56138ae89e3d6f7137db6e9841d1f0c0c7f66dd4446368c3ed81","sha512":"d7f3757696345af83d1ec750ea6cf5a5528f86bbaaf6a9a2f0ff7c269555559cae8d6a8972d962cde514e37564a647be2475884391f9b5c213ac6a37fca58c26","ssdeep":"3072:FVEePhnY6OQGoCbxRRTyY+bX+jCWAu8VMy2gCGU/Wtixtxco:0eP1Y6O7tTP++jCWAnV2n/jco","tlshash":"31f312ba8b645ad1f63e057eb13c382c96251286dc87a2c794f05a90b34fe4b5611367","first_seen":"2026-06-07T01:37:22.814404Z","last_seen":"2026-07-11T03:03:08.39342Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":341,"dns":4,"connect":93,"send":0,"wait":139,"receive":189,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/21ecb4c7-7169-43a1-8e0c-fe30bf779cb3.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/21ecb4c7-7169-43a1-8e0c-fe30bf779cb3.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AAYg0TWEZhnmBdBMv+nci48oawY0NqPzOMZv7dlsrUJqMGYmE4pCTH+bIKhbz/IDpcEjcitf5GohNYyqJpcMrA0hUEc0MF+D\r\nx-amz-request-id: BP7YERNQ63RM5XT3\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 13:07:32 GMT\r\nETag: \"8963215b2b193b67fea764bdd86d80cd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 32759\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 617x920, components 3","md5":"8963215b2b193b67fea764bdd86d80cd","sha1":"faddbd185d84fe0e65636b45242c1c21bf0d6505","sha256":"1c8b39b63c0b19eb2cc3e045a2cc082fa60e85bd46a0263b4e18db63350a0f7a","sha512":"908fcd60ba120a808c1c68e2c346e633a72dd10783bc7c958053564837ef5e03af855ea572328ffd12fcb58a6a81b2449acf1e90d00e72ee8960a5d313364290","ssdeep":"768:p/DQmWO0czDGEn05nXaOv2CekNWm4BVWV9X:p0EOzXaO+Cel6v","tlshash":"c8e2e18c7f059063d172f079cb2f47b50f216cb37d25238ea865a8085f96b5b4866e3a","first_seen":"2026-06-07T01:37:22.816901Z","last_seen":"2026-07-11T16:46:31.703537Z","times_seen":5,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":558,"dns":0,"connect":0,"send":0,"wait":132,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/71b4c2ac-ea73-41da-aa26-e9928afa01e1.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/71b4c2ac-ea73-41da-aa26-e9928afa01e1.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BOggcYhj1taJ39bSI941Y5yjwwrEzAAjQrgrFxMLwXpO54pgPDqJiiwCTk6u4LGvXJk5cwHkaX2h/eIzjPXRXsPfbd+MVFFj\r\nx-amz-request-id: BP7ZY9FKSX4E0ZT1\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:25:29 GMT\r\nETag: \"902092b6f83b14c20aaff0487554e34a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 51643\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":51643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 870x1500, components 3","md5":"902092b6f83b14c20aaff0487554e34a","sha1":"17e02b41398a6bdd8f54463803f0c26096345e7a","sha256":"8f33b07b42224f2567ce3a6cc3e4d128269719f0e001bfb0b5c0c5906795cbc2","sha512":"164988d74f38ef3d221b351404e6f30e8580a208d4a46f86eb9a891b9b5aa894ae2819b06bc6c481b529f867b3d48489df12b340f7f8a7d390e58cada4909ab4","ssdeep":"1536:lTDg9DyHmKJIV8AjjOfPz7VORIusDxk8G:lTD4AmKF2CPz7VORIusDk","tlshash":"8b33f1a226911e16c95c62f4f1dfb52b3572bd73b6b7984e0b8e50b40f02722295c8df","first_seen":"2026-06-07T01:37:22.819778Z","last_seen":"2026-07-11T16:46:31.68234Z","times_seen":5,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/sains.045880cf.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/sains.045880cf.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5197-1780594084025\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 5197\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 30, 8-bit/color RGBA, non-interlaced","md5":"045880cfc7270ecb165676e0abf329b3","sha1":"55d6daad4a44d505e5810bcd2c0d41d0de6053bd","sha256":"eb30206c388d8831e4edd6ac9aa2cfd5c2bd9b6a5d0dd4efb35f8deead121a98","sha512":"c526b4afb86e138442fa342abf72392f804132793869107354f8928073deca9ec69d1c3f9a558464b1c7a406f778cb879530314b604e97663923449eacc39f15","ssdeep":"96:1S7jcDKgHxgxXE/fdHddRnNUE2vMt7r0vMNg9yYvr0HaYgV74QmV+:1SvcDTxgx0XdHddRGfvMtsv600QmV+","tlshash":"07b19fb361728efcb8735ddc91919ba1d56f1ba9a809f321439f64f0e1702e68903f51","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-07-12T18:55:21.674246Z","times_seen":1504,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/pages-core.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/pages-core.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"142994-1780594106163\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:26 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 142994\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":142994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"e99244b0287af97250bee0687ed229a8","sha1":"94d97073823c3626d5d73c2ecfafbbc6386d0dd2","sha256":"f010ef3e9a1fb9d68fd3fa4f19447f86dd3ae4ca93d343b81acc19b0ee05c179","sha512":"7d1d5e40d314008910b35a5c3625551d3e43955c9263213c948abeb88d5eedf2cc3f11f36e359dde9b2e7d3358c829b33fb3a97aebb18617ba9a1cf4953f9ca9","ssdeep":"3072:/7KrSR/Kcyu3fvYsZ7J2DdD6sHm9t+k744rb:DPR/vHYsZQdD6sHG+iN","tlshash":"f4d39e2e31d4b8bb57a79165700f2a845c321d89a004cc87f77cdad5a2a7d7d272b36c","first_seen":"2026-06-07T01:37:22.822928Z","last_seen":"2026-06-07T01:37:39.178908Z","times_seen":2,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/banner_02.d6b5d57e.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/banner_02.d6b5d57e.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"19696-1780594093041\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 19696\r\nDate: Sun, 07 Jun 2026 01:36:40 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 297, 8-bit colormap, non-interlaced","md5":"d6b5d57e91118649b629bdccd2f5cfb9","sha1":"9542149662ebfda41c3705bafe13f5f97c0bc35e","sha256":"ca0d4bcbbb49be27f7d5b215f2eb91252fb7e57d8db3b5532144d7353605def7","sha512":"b6daeacdf2bc38dfb4d41d8646e6755751187890b818ddf709f91b2116a4b1d62dbc7d35fa81ecabf7ca014662c8c549fa1b1213bed45b8c8c5dcc23f25901d1","ssdeep":"384:v/sTzByfEwcog8O45N7B6H0N+WD9YNz80xBYK43eXfZB+VG:vE3BuEwcCJnVmE+W6PnYK4cQVG","tlshash":"6a92d09f64d480a906a6cceac915afb73952e471db90258054dace5b8e7091f023e2fa","first_seen":"2024-07-05T22:58:24Z","last_seen":"2026-07-12T18:55:21.597298Z","times_seen":1616,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/6489655e-f497-41a0-8e39-30ac8d9ebc7e.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/6489655e-f497-41a0-8e39-30ac8d9ebc7e.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2Ssq/4otKGGoK6Ey/m61eCrHxo6jTpJ/Kayop5Rz98wS6vBy6CzlKA/tCr7PviHhWEDSxqV0bbOr3OZ7TCPRwAHGFkHAFwip\r\nx-amz-request-id: BP7TVGSAPTTVEFT8\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:50:15 GMT\r\nETag: \"ec723a21571e5308741946f8dbb04d3f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 22938\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":22938,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 366x920, components 3","md5":"ec723a21571e5308741946f8dbb04d3f","sha1":"00f425d6a4f2bc66a6ba7098822282fc4769cac4","sha256":"e9fd8328c137dd047744f0c80f92957a7ffadd784cdcd1c592a5e6d60c5ea4d0","sha512":"b5477696fef3fd099b9e925b6b63fd54db94b0d0f3519423adc3b55621310abb3944b7e5c3704f8d9e10e3f22b3cb854a50c401520f075ccd66e2eb480bacc45","ssdeep":"384:XGChhbByg6HElqYU791/1ceEg6RG5ocetnj1zqmCGJcLpwcQVSm7+:r1dblqN7X1jsGu5ZzAGJcNZQVSm7+","tlshash":"92a2e134ab0d204adc99a0355cce7ad187038e6c8b48ad595ec0f58d345adcb73db94f","first_seen":"2026-06-07T01:37:22.826432Z","last_seen":"2026-07-11T16:46:31.707733Z","times_seen":5,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":756,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/4a36b988-3923-4abd-91e5-4040f9d5ddf2.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/4a36b988-3923-4abd-91e5-4040f9d5ddf2.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7WYFYuPO5k1gRsY4rkuOZq3Z+uz+WZlaoihIPH+YxO5leilkGO1TCjd7ulB6h67qf/jv4zhouPIlzgH2yXGlokLr6tYewnlr\r\nx-amz-request-id: BP7W5R2Z9F89HBB1\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 12:33:10 GMT\r\nETag: \"30fb13059c8c35cb44ac3aa6a9fe28ae\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 80599\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":80599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 954x603, components 3","md5":"30fb13059c8c35cb44ac3aa6a9fe28ae","sha1":"b125de49c0061eb2b0c00266be682c9d35e10244","sha256":"6d1e70d0df1fac9602fb9680ee3c13bfeb9ff5668a60bdfb87480d7a8a2cba9e","sha512":"c9e3bf5e4a316a3ae757d5994eef1fe5444380e5223ef61e0e8544ea841544ac4eafc4c15c628cf4c59324f22dcf9ef2fb5930d83ec61101528c60e14baab02b","ssdeep":"1536:LAjUR6i2Zya3+dk0GkHfvG75VJaYdsF3VBuS3GkQEuI:LAG6JtWkGHXGtHdE3zuS2kQEuI","tlshash":"7a730286c7e55e46e26f2836f571d169aec0fb4f40240da642a05c578b0d3902ed77af","first_seen":"2026-06-07T01:37:22.828474Z","last_seen":"2026-07-11T16:46:31.674326Z","times_seen":5,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":776,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/collect/amazon/2026-05-08/501b3532-bda7-4771-a90e-8f9afe94da1c.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /collect/amazon/2026-05-08/501b3532-bda7-4771-a90e-8f9afe94da1c.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LOm8l5TpF5jwHlnUkFRTnRygJuHiinl9PvMGMDr8QeMQOTBSgwy515K2eMNIkhiArvF2uWOxd8oIBGIe0nFeuQTP6bJL4Dpq\r\nx-amz-request-id: EZPQR8JT07X528D9\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Fri, 08 May 2026 15:23:48 GMT\r\nETag: \"92b1191c78dfe9099ef525e14dc4eaa4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 104693\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1387, components 3","md5":"92b1191c78dfe9099ef525e14dc4eaa4","sha1":"b5d549ebcb74ce09bc806668cd1a2624cbfaa3bd","sha256":"0e621e18c439635e8246eef7e4f9a87672e948bf2a2ef296434e6fbe457efd78","sha512":"e3b7a9d4eaf1e31331b11910e23e214102573a76187983eff9a8d5a5e16f7e3fe77fb95748a1c11f167a872ba575ab30c3bfe8f8101995cbe7f370b7f5ff6ed6","ssdeep":"1536:s3y0cNtZAl+etc7ok9Rce1IjWlKX9MU1ZFsrtSGsNfbCcZtJ/A62jaID45G8s:Ay0KtXe4owRPIClLUXaBShJCGDW3DAc","tlshash":"5ca312f266b83e51d9211c3450d05f153be698fc12647ae92f3b8f602dc89d279eba09","first_seen":"2026-06-07T01:37:22.830203Z","last_seen":"2026-07-11T16:46:31.714892Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1169,"timings":{"blocked":1057,"dns":0,"connect":0,"send":0,"wait":108,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/banner_01.ad0364fc.png","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:42.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/banner_01.ad0364fc.png HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"84769-1780594086424\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 84769\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"ad0364fcce3be4744a03491594618893","sha1":"53af5fc779bad27dded7bd0fdbcf8e1311bedfa6","sha256":"c7e3261548b2edb52aa4a2cc4b54ac23070a13206152e57572bd5b93cacc1c1a","sha512":"cd1e76b3ce0829237d212891650caf80f20b24330e5ba58674b0550eec6ad42f42eac9e328c453c007aaa9deb6209949ca5f5c2d45960c1965545b3eaf415867","ssdeep":"1536:bHkJp0iR8hwwi8qjG6dwlX9oJF58qAkGTD8MrjDbdUtzRzwtPtkzz0w0W8stcM/l:DkJuO3npjXWNoJFuqPGvNXizo2bYEQQt","tlshash":"748302a0bb4cf54aa07a1053722c69160e5b01febcfbed7c06152af55ce7eb369c1609","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-17T03:27:37.905624Z","times_seen":2052,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/app-root.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:39.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/app-root.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"22689-1780594107750\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:27 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 22689\r\nDate: Sun, 07 Jun 2026 01:36:39 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22689,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21874)","md5":"b2434421b3d88241967d6ea9656410c2","sha1":"e2b3fc434ebbc3fe9a63fa939576697e647d34c0","sha256":"dc24af585c7dac867b6d6b26706a1b47f6ddd0de65967e800338a6b0b9045688","sha512":"984425bf1aab4cb789c6b81c7efd379abd563a8d1ec97aff9ba4048f53afa052be6f1ea2356bcc5ff4d13747bc71d9765098402de646862a50f95420c13725c9","ssdeep":"384:2S+LylmQ5HuvY7D4SEmgt4t6EP+za+9XWvzpH73VnHh+O6fl7OBM6hkl1wm:2ymQBDh7P+zahHh+Pfl7O6r","tlshash":"8ba2f8e8f695b47a1b6730b4a03f220aba77b859240a8085f644e4cb7c7d50e7167f7c","first_seen":"2026-06-07T01:37:22.832962Z","last_seen":"2026-06-07T01:37:39.25303Z","times_seen":2,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/collect/amazon/2026-05-08/315e337a-2093-4ef7-8aa9-e4392b2ba64b.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /collect/amazon/2026-05-08/315e337a-2093-4ef7-8aa9-e4392b2ba64b.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iqo9Ootyzia8wPcV0CoVyGCXSvr30tkJLTJowz9kvlp3OfJYj7izzEoygm7JdOT22/3JDu9KO74ZJOF5y1ek8QS548sAPFNB\r\nx-amz-request-id: EZPRDHR7MTTXSTKY\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Fri, 08 May 2026 15:24:58 GMT\r\nETag: \"2a508304680dce00aa763dfcc3691e5f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 18219\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x442, components 3","md5":"2a508304680dce00aa763dfcc3691e5f","sha1":"543628c04cb2293c03c026e33a32659c994877dd","sha256":"f38a581f1f6b0f9e70b7ea5786090f351f8cde5c8c0fffa8219d4fd5977b4d30","sha512":"bde87aed15c028dd71e0ccb2f8f190d2129ab07f459b00ddc1c8100c4c0d0ca6ae3afbe960d00d97f4990d3dea22fdffe4a27b35e1d71d54f927c017fa144c09","ssdeep":"384:M5J5SEc1OJRCFxFIX9yviEKPf2GBZSGCqaVV0nk+E5jBNcTX:MbOtx9i/5fCqmadEjs","tlshash":"6182e1ce0717ddc3c3157ab0dbad1b04bb5a89a5a4834781320458483a254c9bbdbe8f","first_seen":"2026-06-07T01:37:22.836054Z","last_seen":"2026-07-11T16:46:31.700289Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":993,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-22/59088613-5484-4214-a0e9-adf33be820b7.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-22/59088613-5484-4214-a0e9-adf33be820b7.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: e6KfmCErx95CWsG8Yvo/ENpOIcxJSq1OGECh2h7s+TQGBuYk1IOD7eBoQq6WIV4ZnjxVhTq6xXJsbYi0ugdWvJ5kUUO5DuD4\r\nx-amz-request-id: EZPTXB1ZNTWPY3ZD\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Sun, 22 Feb 2026 12:38:37 GMT\r\nETag: \"05b39c970d86d32c1e85f910e78387ea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 216241\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":216241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1273, components 3","md5":"05b39c970d86d32c1e85f910e78387ea","sha1":"233ffbbddff5e7d7a8952832553b508cba70dba1","sha256":"103feb81868a6edabc79d7eab15268a097cf19d2f4e333605c5c3801aebc69cd","sha512":"790f463f85109c85ad48a53388ad3d0b55bfa9946c8a435dfb1310d68ba52daa96c2a0d64ae44ecb5c2cdd1397bb6f07f10a7d74a76ca4bac94dea3295c82f50","ssdeep":"6144:JZFGhZ/64i78Fc1hcbR60zd7PHy5qI4+q:2/64HGhcTV65qIJq","tlshash":"ae241291fbcde3b1e89d553ad0a4834e77c968e773c4559ce88da255f10ca2830a8d37","first_seen":"2026-06-07T01:37:22.838487Z","last_seen":"2026-07-11T16:46:31.726563Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1278,"timings":{"blocked":1149,"dns":0,"connect":0,"send":0,"wait":118,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/right6.9e96e0a5.jpeg","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/right6.9e96e0a5.jpeg HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"5679-1780594102289\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5679\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"9e96e0a5327460f149797cf3aed1d2b3","sha1":"5a4141fa427be4f0fbdfc63875b4d34dab06211d","sha256":"9c729f94f92f750b76eb654ac4520b79661570d4f00b3b1fdb9b2423bbb3675b","sha512":"d81b0fb19daefd4e8f9738c2a805f762dfecdeccb246fc4de1d462edee9599187ac994f551b6fe74447e3d8400d56ac6e5408fab4dfb1d068e47cacfb90592bd","ssdeep":"96:WwDuVj05SZpcE6bIIPMKmm8jSQ+im3sboRaYKoOqSos2NsSVJPRcL:VuVjtUEaPMKmmeA3sERzar2uSdeL","tlshash":"55c19e46d39fa328ecfa2a37511f351ab3661a0728eefdc219e21c58e65114023c9d7c","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-11T16:46:31.710643Z","times_seen":1942,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/selle/2026-04-16/54ed9ef8-73b5-419e-8bfc-4d04cf334346.jpeg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2026-04-16/54ed9ef8-73b5-419e-8bfc-4d04cf334346.jpeg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 31h7WJ+IdAWFObKGUQkJPb7i/JEgFBB0ZkAmQxpy40rpKQ9e5aA4/6ddz8eVD7f/FQ4RyKnxhuyCfmrBX1xF/SiSZR/f6jY5\r\nx-amz-request-id: BP7SBGNMPS03GW1W\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Thu, 16 Apr 2026 08:47:53 GMT\r\nETag: \"100a8547d9bda6ab82f82eb2775ae2df\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 375580\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":375580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 978x1280, components 3","md5":"100a8547d9bda6ab82f82eb2775ae2df","sha1":"2ec0100056fd07f80d37444e1d966a7a4b328449","sha256":"860d6e8485fc0f586f4c5fd2e70e581979616f967268a0590ffbaaeb9ab4376a","sha512":"b7e0cc86250dfc92b4ab703e7b76a5c9c95709c8cc9fb3a79da0e0ecbe8c2c2000106f7c953d65de78802d0ff5168bcc742f387ab5f1b84483d43a700be0866a","ssdeep":"6144:U0ZM6Og873o/zpcF0I+qNfYP5iuMVo4HRhe5bIwajIyWkyRwGW88Y1nSHgpie:vgg8zqciI+qNfd9eKze50Tok2wNSJ/ie","tlshash":"4c8423018c1db627dc42307679fbfa2e723ade729686e795028d6d46030d63d1c6af63","first_seen":"2026-06-07T01:37:22.841873Z","last_seen":"2026-07-11T16:46:31.726052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/type/2026-02-22/664ffc69-0354-42a3-8296-0169c88cbab2.png","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:40.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2026-02-22/664ffc69-0354-42a3-8296-0169c88cbab2.png HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9n93jLOD3RHMgryGPTylNVskXTZOhhtjJMcIHYhu9jIf+J5FCfj3Bx0LGiSzuxQsDlYktjCMnv565stGg3L19xAJpupSHuh2\r\nx-amz-request-id: BP7G91NMT8R9SBBH\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Sun, 22 Feb 2026 11:20:32 GMT\r\nETag: \"fe338c9b5d010848cb21a1db76fadf7e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 227074\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":227074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"fe338c9b5d010848cb21a1db76fadf7e","sha1":"45eb4551bb82a4993dbc63c4bbc236b89b52fe61","sha256":"eac06e949524de896c14555b703c2a7c6e63c573083b7544a336f8c027fdde81","sha512":"e12280cde3ef9eb88c6ce4af8447dd342bfda378d30776541085a725f5624aef98c048e18e724f704b821de16afd3ff424fc4ad6649908c6885410f616111936","ssdeep":"6144:vIwTgSDMGq8hLz6R+CxH/SNXquhJbgcqnHNo3mznP8:gfSQGq8hO5/EDhZa23mD8","tlshash":"582422ae161261137fd59cb23cd193ac335797989d8dc1deeec305603eb802794eb886","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-16T09:25:40.636626Z","times_seen":5147,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":612,"dns":0,"connect":0,"send":0,"wait":131,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/28cdf4b5-b9e5-4e43-a4f3-9a8c3e02d564.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/28cdf4b5-b9e5-4e43-a4f3-9a8c3e02d564.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7S/UyjoL+xhN9L4jYb4I5ivmtkVYIpk+I0qxr7qHnN+g/AkMrt98dBueumqu2DrcI+/wOCm5JOdmk/NE/MCYnGPI6OLuoyxt\r\nx-amz-request-id: EZPM7QY1A6QHT278\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:38:13 GMT\r\nETag: \"66ddf0d0b4e1f28eca63c51b823cb7b1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 265836\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":265836,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1211, components 3","md5":"66ddf0d0b4e1f28eca63c51b823cb7b1","sha1":"bae8bab07294b8ce76be8caaabdec9e448041bba","sha256":"5b9d3bf85185cd015786c8cc90bb6738d8e0978cc8c1587c0367c0b535249e43","sha512":"21d4bb291381769c39123a598b3d981ddbc939b684973010578a9aef08b454d375bafa1b9e410713f0c5397dcfab967eea96c60f8f59582984b6441e9fdd4226","ssdeep":"6144:hrgGf+KomAGQeRZ7r+AHEptPnjFEOVLeT5wnGiczh:h7GKoVx0Z7fHObHQYGHN","tlshash":"104423dbf3c78965ef7df73160dc427018168962ea8df4beb5b37527602202639d24a8","first_seen":"2026-06-07T01:37:22.860417Z","last_seen":"2026-07-11T16:46:31.708633Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":862,"dns":0,"connect":0,"send":0,"wait":148,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/collect/amazon/2026-05-08/bf46b1ce-f3c8-4e61-af1d-fcfc889c3f29.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /collect/amazon/2026-05-08/bf46b1ce-f3c8-4e61-af1d-fcfc889c3f29.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: L7DEcbRcZ19T43Dc/a2p3F81To8Zv+GwEBAtEOCKWo4tEdPMMe2wECNxQHiYr10gKNeyG35AJURbW9X5AqOpCivwAhBxOr85\r\nx-amz-request-id: EZPMXKHQ5TMWJMQB\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Fri, 08 May 2026 15:25:46 GMT\r\nETag: \"8a920a9b2fed97e2a0336bfeba89e1c1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 162658\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":162658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1460x1500, components 3","md5":"8a920a9b2fed97e2a0336bfeba89e1c1","sha1":"edb7ff2f88ae90dacd9cc13dbc554ca5aa122bf6","sha256":"2b6e6937d5a8d52399ec7390479f68a85fe75217d11d96b90d17ae3b48441122","sha512":"c0fdb16344ee16333dffb6e5b6f25635c29dc9c92bec634a0eecc9110c30b7cf93adc509fa5b5dfc4f88ca702daee0282b13aa8b525abfca4354b0d4eb7d0a3c","ssdeep":"3072:+Vyh29NguiAMlwjxAOEMpd/6Aph9lgpWvpKSe35L2EIokjncZfXvTM:+4h29NrM+1EMpd/3h9WpWQJYUInUXTM","tlshash":"4df322f9c63ae2a0fe5f78778441f9b8c2b055900cb47c843b45c4983499e0eaadf65e","first_seen":"2026-06-07T01:37:22.863616Z","last_seen":"2026-07-11T16:46:31.728614Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":959,"dns":0,"connect":0,"send":0,"wait":123,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/img/shopify.c0a53e62.webp","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /img/shopify.c0a53e62.webp HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"15728-1780594092405\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:12 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15728\r\nDate: Sun, 07 Jun 2026 01:36:41 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0a53e628ff60f2e62d58160ac97fd98","sha1":"fbfbbdea97bc5b54783b2e4358fd803305eb2afe","sha256":"ba5255b49fe89d00a39a09a91533f0c924e080b17235fd38178be01720887b33","sha512":"419aa8f68d7951140cb351dd8cd350ee56a592e56544b5427d8cd2ea637dd991d95b4a447319d6fa668fc0ef7af1ec0f9a7ffd5375ed23be903f8b5bb84fc36a","ssdeep":"384:Mb7M0VPIejDv/rxMfJaVMMAoqwUyL+d/3b/AjMSSHLMaWLQ:Y4l8vjxMfJa6Doqwxqd/TMS0E","tlshash":"f362d06242fc695ed84a456c9e9823b343e14f52f7dd270b8eb1ea938818b617d513c0","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-07-11T16:46:31.71334Z","times_seen":2025,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/favicon.ico","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:33.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en\r\nContent-Length: 762\r\nDate: Sun, 07 Jun 2026 01:36:33 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":762,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (758), with no line terminators","md5":"f6fccedf86506cb643e127d9f2e431cf","sha1":"190ad927be6c5095ed1f024df5d6fdc29f4bffec","sha256":"1e9d21c8143685be893701e3ccd84e835ce6f7b9871e0c6dad15d94be3beaa2b","sha512":"2fca12f4911f35bad854f11fa0ba52ffd8df02d23d40dab436f0e1412ab267acdfc5e63abfee717abc44961ec0781a2d27884756b9da5fcf789e1043695ca297","ssdeep":"","tlshash":"da01203ec10a1017bcb60c7b35513ea83858c8c396720734e85489f8d6854f8976178d","first_seen":"2026-06-07T01:37:22.868244Z","last_seen":"2026-07-07T23:20:33.270885Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":1,"connect":246,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk-globmall.top:42999/js/chunk-vue.6e7ef11f.js","fqdn":"tk-globmall.top","domain":"tk-globmall.top","tld":"top"},"ip":{"addr":"161.248.15.131","port":42999,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:34.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tk-globmall.top","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 04 Jun 2026 17:00:00 GMT","end":"Wed, 02 Sep 2026 16:59:59 GMT"},"fingerprint":{"sha1":"6C:44:EC:BC:01:0C:C1:1B:29:EA:AA:AE:01:27:93:8E:22:3F:6D:B6","sha256":"FD:4F:BD:39:D4:DA:1F:67:36:B7:52:4C:E1:6C:EA:1C:83:EC:0B:AF:AF:85:4B:37:33:4D:46:52:73:13:03:F2"}}},"request":{"raw":"GET /js/chunk-vue.6e7ef11f.js HTTP/1.1\r\nHost: tk-globmall.top:42999\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nAccept-Ranges: bytes\r\nETag: W/\"79287-1780594105967\"\r\nLast-Modified: Thu, 04 Jun 2026 17:28:25 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 79287\r\nDate: Sun, 07 Jun 2026 01:36:34 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":79287,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (62805)","md5":"fa1d201554544649e71aacd39fa2d917","sha1":"fef3f95e1852cee2457f229510be970063c0d1bd","sha256":"4922f9bb8b656a8666ec2640ac24059bfb2b20fcf44b384e64c403fcdcfec2e8","sha512":"8db6c4bbfd60ddf4afdcf9b5c4c2241f26b0e77e38c2e669848626e6cb18bacf396f313c163826ceac546ce9e9e298b5c97169a4332b38db75094c44fe3e0070","ssdeep":"768:Agh/+aULDeX424Nw+f9+fq/46/zlgbrsRLOaFcSsTfTyHW1kDENe4U7QuJmZZzEQ:PWaUuXH4i+FmWzmMLAZU4U7QH7zUM","tlshash":"8e73d6dcb385b07113ab20b540bf150bf33a7955a80ac1a0f252e4da7d7845ea16bf7e","first_seen":"2026-06-07T01:37:22.870456Z","last_seen":"2026-07-11T16:46:31.698752Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1773,"timings":{"blocked":510,"dns":2,"connect":246,"send":0,"wait":248,"receive":496,"ssl":267},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"tk-globmall.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-23/d897c55f-e13c-4cc7-89c4-55b3c2a81834.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-23/d897c55f-e13c-4cc7-89c4-55b3c2a81834.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +Y0W+JSdmxlCJ1+noGyPecwN3cq1RFso2reCsEvYy/NoPJmIlNidbh5bbsO5d06AbbI3QfpQtO1wVmmfwzSnNLwM+b2svvPW\r\nx-amz-request-id: BP7VCYNN6QCHRPB1\r\nDate: Sun, 07 Jun 2026 01:36:42 GMT\r\nLast-Modified: Mon, 23 Feb 2026 07:39:13 GMT\r\nETag: \"bc8a27f54d7a16324e6b65f69044b243\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 58451\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1101x1500, components 3","md5":"bc8a27f54d7a16324e6b65f69044b243","sha1":"242552e5ddfd5431e1c1bb8092164701791a6a26","sha256":"c0f10f6b3dcb34c1fe81ed186104cfa6822289723d11449521b533e152afff8a","sha512":"cbd8f78b68cae7eb17a1603de5f68a858172da704c2065ba33799409dd9cfdfc1f5d949f3eaa6fb4e751027937134482902d71a4fd5dbba452dd634b269e30fd","ssdeep":"1536:z1YXWMuMyUpHgEs6cIErTuIXtv5R90p0fxT:z1gWMubQATh5U+","tlshash":"f64302ffba55b112c1a640b095c943521ef4af2b80f7a47cb14f0f421d64378ecea6a5","first_seen":"2026-06-07T01:37:22.8735Z","last_seen":"2026-07-11T16:46:31.709635Z","times_seen":5,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":753,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-22/bba4721c-43cb-4323-87ca-91609446d5b2.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-22/bba4721c-43cb-4323-87ca-91609446d5b2.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WVSLCx8MOYnkyevfbwNTGyKZBXRmzaA8NYhblExdiJkYghiQ3XGBdsTYA6ALI7WxoI6uqKjjQbJOzOT8L/j5cppV33wWQSxl\r\nx-amz-request-id: EZPTA634M868EPEZ\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Sun, 22 Feb 2026 13:35:12 GMT\r\nETag: \"ebc8600f0632e33846b3ba82df317ff2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 157410\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":157410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"ebc8600f0632e33846b3ba82df317ff2","sha1":"83bc2dd2f1dbfbd6a1a5b2e909281a107cc3ae2b","sha256":"84260eebc0e06f5ebb734d824962bd22e4620cd1c6b946dcb1bc3995e26901bd","sha512":"59569a3fcba27415202e09ff7e660f7defdf245896ab180b2fe884623ee612a6c4b9579a46b51279236e401c39c22faaa3a235df0a618ef7c4d88b8c3e88f235","ssdeep":"3072:/73k0eAeNUEO3vDiD8GpwZmdliChwkPpZPZQQcIO2qywV21KiHmbnS8Ur8qZH:D1f+OeeZmdFxZPiQxoyw1S8sH","tlshash":"b8f312c454420f34fc63f27f52a39e0352d666124f784b6b61b1af6d992e62379f01e8","first_seen":"2026-06-07T01:37:22.87562Z","last_seen":"2026-07-11T16:46:31.711342Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":1077,"dns":0,"connect":0,"send":0,"wait":119,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tikroon.s3.amazonaws.com/goods/2026-02-22/fbd3a017-8ab8-4b4c-9084-503d0bb5f507.jpg","fqdn":"tikroon.s3.amazonaws.com","domain":"tikroon.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.207.102","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tk-globmall.top:42999/","date":"2026-06-07T01:36:41.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2026-02-22/fbd3a017-8ab8-4b4c-9084-503d0bb5f507.jpg HTTP/1.1\r\nHost: tikroon.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Fb/p4miSiD/o9egUBFU8A3jZ3R63dDJF+BK+q8EHnu5uHujeyACpemuszyZF01hQ6J3NXJatytlrrLTAGfgDRPgpAxremzGt\r\nx-amz-request-id: EZPMXX9TR7N0QTGP\r\nDate: Sun, 07 Jun 2026 01:36:43 GMT\r\nLast-Modified: Sun, 22 Feb 2026 13:36:17 GMT\r\nETag: \"30367f2be7a382617f0e151c35cba213\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 229324\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":229324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1500, components 3","md5":"30367f2be7a382617f0e151c35cba213","sha1":"d239f94a08de3fa4189c3c52c75cce3744ee36d9","sha256":"2d47c159625513339b42062c1a512cbaefb901f3714b0cfe9230cf355ac8f7e9","sha512":"d2dc12f3007ffd102188d99140aaa102d614b9a553d1c3d4bd0ec8f435a77b6e0c4bfd8a24da9e856b344a75fa340f4d6b95b5c0c03c9531260f494ea8e7b5d2","ssdeep":"6144:N4B489Ctyucr9kAwuzl9mGLdWihg1qoJfG3Y:+BRCVIifuzlPLsihCnfgY","tlshash":"ca2423850a5726263be1e963bdb55e69f705472270b2b44742df3cecb3c08c5b853b8a","first_seen":"2026-06-07T01:37:22.877523Z","last_seen":"2026-07-11T16:46:31.7297Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1219,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":124,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}