{"report_id":"9c45c17b-2673-4e47-a3b2-5117ce743c8d","version":0,"status":"done","tags":[],"date":"2026-06-09T08:25:03Z","url":{"schema":"http","addr":"trusdes.com","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"title":"Trust Wallet","dom":{"size":580,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (577), with no line terminators","md5":"92436cb290b3ea79433fb4d8c1a01687","sha1":"bd4d47d77c64f9cc3f3939dc2ce70356d24e86eb","sha256":"029e070ed4681f106b0ddbef92339d713a9a277df2749ae9e83bdd96b0d28a7a","sha512":"53912e224ae6585344950dfa1e722c1818bf8c457f5de7d5765c2df0c91ae0e6728be38270abf4beb73b637701b2b90b2907835b5472de5dc39dfde602df1d3d","ssdeep":"","tlshash":"cdf04122e2c2540db13bd999fe61d0647000c9a0e3af6ca04a9e563ae5ce163867138c","dom_hash":"domhash1526080775b6d2d8c242550c18d2e961","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trusdes.com","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T08:25:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"ip.faicai888.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"trusdes.com","ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":184234,"sent_data":1864,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cwconm.com","ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-04-11T02:46:51.27719Z","last_seen":"2026-05-28T05:59:25.43076Z","alert_count":0,"request_count":3,"received_data":56127,"sent_data":1526,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ip.faicai888.cc","ip":{"addr":"172.67.128.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-05","domain_rank":0,"first_seen":"2026-04-10T10:48:38.341791Z","last_seen":"2026-05-28T17:55:33.319557Z","alert_count":2,"request_count":2,"received_data":1114,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipv4.icanhazip.com","ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-07-31","domain_rank":65266,"first_seen":"2013-10-09T05:58:12Z","last_seen":"2026-06-08T16:25:08.90438Z","alert_count":0,"request_count":2,"received_data":1256,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"dcef0aae63d0c29ba961b0e947f7cabf","sha1":"9732bc827ea1b19e7e0e67a0c01be1ff6a91b400","sha256":"a4336431684e75755a9e812deb2704a0606f138b796656adb16bf2f1f69adc08","sha512":"035945558200dbae12495f4a627afda20cb3eee66693d93a65e73ff9560d88e099992c50d2f8646bf69d60a705058218a0602cebc6a72da737e5f1573a5a7756","ssdeep":"","tlshash":"e25198b67da7437466a3e139567fab087c321403250ad204b45ccc482ff2ac2b0a5fdd","size":2907,"data":"","first_seen":"2026-06-09T08:25:09.037239Z","last_seen":"2026-06-09T08:26:11.006761Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/group.html","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d8751da6f857e6ba355528fc47187a07","sha1":"3c271c8059271e5ff1f48ed0127f280a5919a297","sha256":"6b8653bec2fd37750a66db832eaa9d0529baa960a72ff250a0490236b33d2ee2","sha512":"ce4a65a31a2c238904607861bdcafaf5e18d52a99474a58fc83f19e45d7b867b1d86777a1570c7e70b10c208c925f8959413fe94fb936f0dc9e64f31d955bf0c","ssdeep":"768:I4JJt5z11OWLwAxsCpcOiRJ/wNvobSvJwh2xNH7ZMQlYN:I4JJt5z11OWLwAxsCWB/wNv7i476N","tlshash":"5ad24d3b53c321e2776d76a33742aa4603160dc6e8e3468548e705d99b25a1f0fed78d","size":29951,"data":"","first_seen":"2026-03-04T10:06:21.802937Z","last_seen":"2026-06-19T23:42:05.729814Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/group.html","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3df65e228bd8c59ff51fa216d946796e","sha1":"d2f8ffcf9d29a39f6b8f9cf73829b35868385d2e","sha256":"1be5e3621a98017f45e21a2df41e3027ca89c76e0a9b17fff51a5497e827ec77","sha512":"249849474fa1ee0aa6fe84f02e6844c406726b7648caa211463b4dfc088e9fecd02d4e5e73278c7ca930d6b3459e36941344e411b127bdfac73613e6d0ea9b53","ssdeep":"192:O7M9AkU2R/J9L2rS9n0IRiV/qmzhm1sG9GKAJw7EFc/lpnGIgOW8qJ+4qqFpi2m0:2M6kUI/bgS9n0IRiFqmzhmGG9GKAJw7M","tlshash":"ad02329972c1f85217436ba200b7040bf369e89835eac83cf4a5d9d53c7568681baffc","size":8335,"data":"","first_seen":"2026-03-04T10:06:21.801263Z","last_seen":"2026-06-19T23:42:05.73043Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/c.js","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7bf30da5efd4b7ca5e72b0a8f871b1","sha1":"c117254da1bac8f888b018a9f7702292f9614b44","sha256":"15a48414c08198998bf489f38ef368945fd4f87d344924e4dfddd1dee22be4c8","sha512":"bec4dd231d468d8f04afeff556bb06dfc751cc94dc04001c31aed1e0450dc96ab5dcdb5423145e924cd41385e1f92099ebfdb0fa0003fc196b3c6fcfd2f5b04d","ssdeep":"","tlshash":"155166f5337b2a3053a525d170bef79935b272102d0b8480905dd1887db9deb4679cac","size":2689,"data":"","first_seen":"2026-04-18T19:49:25.357376Z","last_seen":"2026-06-09T08:26:10.998706Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"645fd09c3f0c60f5dc69b153cbf371b8","sha1":"735d6d86e14ee78d4ed9a34f28098e9ed7c92163","sha256":"c48660e4878a74ebf1a311b969088ff4630d086838582868a7c8a4b4380263a4","sha512":"8732101c146c6a22e2d5483c46117874b0ae44ac9018f87ef64a02ec36703eba167b1ed4c0807659a313b9d026af800dc318578dfa3e378ec60f0986b79290fd","ssdeep":"","tlshash":"e3e02b2998e706384cf67a441075da7a34f878a4aaa3e057625cc87dce39fc54c14aed","size":424,"data":"","first_seen":"2026-06-09T08:25:09.039646Z","last_seen":"2026-06-09T08:26:11.003437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"69251896fd6417ee62d268394a519547","sha1":"ff174e8ee437411bbd038a502113fa017d23f512","sha256":"0ddabd428fa57118678e56b7e41b9f9e09070105af1c06b585a71e532e76c7cb","sha512":"913e8b24693e4e235df593cebf3e7bdda890038e8e0f37ab68b5176c405af0c13413e0fcc790e73c179d4dd305800a5a3ecd9c4d9e51a4496263b92f95dbc4da","ssdeep":"","tlshash":"8aa022032383a000a822c820000e0008003030c3008b8a2a030c22c0ee08aac020302c","size":60,"data":"","first_seen":"2026-06-09T08:25:09.040883Z","last_seen":"2026-06-09T08:26:11.004238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/assets/index-DCCzqoba.js","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"656a70d055473fca915a03158355e723","sha1":"af6b29a7e0636dc1f35825ef74fcc0f8f1369e21","sha256":"f95e2b229893a91443ec9e7141e30a28d22a09f3a1b610673bab8fbbac89a902","sha512":"29c4b823eb138b8b75725ef158b7ccbdfd2b1f1907235c64c8c90cd98aceddcd3c80320744ba47fe30bcbd03877e59d3caa0976b1b690231e386af5ae765bd3f","ssdeep":"3072:MYWD5dMRZaHvD4XrEsFRs+7GL7bFuWcm9gszsMUDIhrUbK3FzW4sgM:MYWD5dMRZaHr47hbsH/bFx6It3A46","tlshash":"0604dff83582b63293ea18e640770405f37a2c5a3809c898b59ceddf3d7a45621b7e7d","size":177924,"data":"","first_seen":"2026-06-09T08:25:09.028387Z","last_seen":"2026-06-09T08:26:10.99753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/49554fde7424c31c.js","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e1c2a62960ff9a817c2d90c12096f1","sha1":"4b8bbe35c6d3542589ab6a1c8b6b70f008980038","sha256":"6bd1148bd1446656cbf44218f28379a7c62a5374cf2c3a5729fead87e1c02811","sha512":"9f77fb2d9b61f30adf6a373a501f738f252c07453591c1025b0b37326b731dc5f4bed4e299144bf532474bd850304a015df8dd210d0909e23fff29e27322387d","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXGb9aM3:Hz9qQEyruiDyTcNaKldXGz","tlshash":"34337deea38026dc5cb4cce7a53706ad63f8db076c14326db38bae91b45f7109950729","size":50620,"data":"","first_seen":"2026-04-21T01:58:06.820047Z","last_seen":"2026-06-09T08:26:11.002717Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/group.html","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"471a8208af8e355aa71e5635b2810f36","sha1":"97d6512862904902aabd3bcd3a3e4ba2ebc1ca30","sha256":"6b96c050c129fcee4fc3fed1a45de3f66a1090914550b3665b419a3cd1aab39d","sha512":"7b69dac20fc9a36dad5a3aaa336284b1e469d89d9a31bab9009f90ee6794cd6b65d86bd4f4cf19ff2542ccc3a9ca48f59489259f40ffac2ed733683533a839b4","ssdeep":"384:84iG/FZpJgY/ZQpplmAsZzcjWLyjbUJTT:84iiZlZzcjJbQTT","tlshash":"c042c89b33c9c4accf29dc4f59571c93d5de9367229dc0e2eb835c89ec2a6198174b88","size":12501,"data":"","first_seen":"2026-03-04T10:06:21.804012Z","last_seen":"2026-06-19T23:42:05.73113Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"645fd09c3f0c60f5dc69b153cbf371b8","sha1":"735d6d86e14ee78d4ed9a34f28098e9ed7c92163","sha256":"c48660e4878a74ebf1a311b969088ff4630d086838582868a7c8a4b4380263a4","sha512":"8732101c146c6a22e2d5483c46117874b0ae44ac9018f87ef64a02ec36703eba167b1ed4c0807659a313b9d026af800dc318578dfa3e378ec60f0986b79290fd","ssdeep":"","tlshash":"e3e02b2998e706384cf67a441075da7a34f878a4aaa3e057625cc87dce39fc54c14aed","size":424,"data":"","first_seen":"2026-06-09T08:25:09.039646Z","last_seen":"2026-06-09T08:26:11.003437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"69251896fd6417ee62d268394a519547","sha1":"ff174e8ee437411bbd038a502113fa017d23f512","sha256":"0ddabd428fa57118678e56b7e41b9f9e09070105af1c06b585a71e532e76c7cb","sha512":"913e8b24693e4e235df593cebf3e7bdda890038e8e0f37ab68b5176c405af0c13413e0fcc790e73c179d4dd305800a5a3ecd9c4d9e51a4496263b92f95dbc4da","ssdeep":"","tlshash":"8aa022032383a000a822c820000e0008003030c3008b8a2a030c22c0ee08aac020302c","size":60,"data":"","first_seen":"2026-06-09T08:25:09.040883Z","last_seen":"2026-06-09T08:26:11.004238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trusdes.com/assets/index-DCCzqoba.js","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trusdes.com/","date":"2026-06-09T08:24:39.165Z","timestamp":1780993479165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trusdes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 07:33:00 GMT","end":"Wed, 08 Jul 2026 07:32:59 GMT"},"fingerprint":{"sha1":"F9:E7:66:83:53:52:B0:E6:A0:A7:C3:87:B3:AB:83:99:5D:BF:9A:C7","sha256":"8E:82:F8:EE:93:FB:EB:CF:BB:3F:26:A2:DA:D3:9F:FA:55:3D:6D:CE:15:14:46:E4:92:DB:C1:EF:21:02:66:E4"}}},"request":{"raw":"GET /assets/index-DCCzqoba.js HTTP/1.1\r\nHost: trusdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trusdes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 177924\r\nserver: Tengine\r\nx-swift-cachetime: 12077\r\ndate: Mon, 08 Jun 2026 23:45:58 GMT\r\nexpires: Tue, 09 Jun 2026 11:45:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nvia: ens-cache28.l2de4[0,0,304-0,H], ens-cache16.l2de4[1,0], ens-cache16.se3[2157,2156,200-0,H], ens-cache11.se3[2162,0], 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)\r\nlast-modified: Thu, 09 Apr 2026 08:28:25 GMT\r\netag: \"69d76329-2b704\"\r\nali-swift-global-savetime: 1780962358\r\neagleid: 9b66d79f17809934791911225e\r\nx-swift-savetime: Tue, 09 Jun 2026 08:24:41 GMT\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: ERtziIw3qMsnMpZhPGXc7DBFVbYiqIaxcVs_0vTr-ldJIeCBvkvqRA==\r\nage: 31123\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":177924,"size_decoded":178806,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34898)","md5":"656a70d055473fca915a03158355e723","sha1":"af6b29a7e0636dc1f35825ef74fcc0f8f1369e21","sha256":"f95e2b229893a91443ec9e7141e30a28d22a09f3a1b610673bab8fbbac89a902","sha512":"29c4b823eb138b8b75725ef158b7ccbdfd2b1f1907235c64c8c90cd98aceddcd3c80320744ba47fe30bcbd03877e59d3caa0976b1b690231e386af5ae765bd3f","ssdeep":"3072:MYWD5dMRZaHvD4XrEsFRs+7GL7bFuWcm9gszsMUDIhrUbK3FzW4sgM:MYWD5dMRZaHr47hbsH/bFx6It3A46","tlshash":"0604dff83582b63293ea18e640770405f37a2c5a3809c898b59ceddf3d7a45621b7e7d","first_seen":"2026-06-09T08:25:09.028387Z","last_seen":"2026-06-09T08:26:10.99753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/assets/index-J-RLoyxy.css","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trusdes.com/","date":"2026-06-09T08:24:39.166Z","timestamp":1780993479166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trusdes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 07:33:00 GMT","end":"Wed, 08 Jul 2026 07:32:59 GMT"},"fingerprint":{"sha1":"F9:E7:66:83:53:52:B0:E6:A0:A7:C3:87:B3:AB:83:99:5D:BF:9A:C7","sha256":"8E:82:F8:EE:93:FB:EB:CF:BB:3F:26:A2:DA:D3:9F:FA:55:3D:6D:CE:15:14:46:E4:92:DB:C1:EF:21:02:66:E4"}}},"request":{"raw":"GET /assets/index-J-RLoyxy.css HTTP/1.1\r\nHost: trusdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trusdes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 1730\r\nserver: Tengine\r\nx-swift-cachetime: 12078\r\ndate: Mon, 08 Jun 2026 23:45:59 GMT\r\nexpires: Tue, 09 Jun 2026 11:45:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nvia: ens-cache8.l2de4[0,0,304-0,H], ens-cache20.l2de4[0,0], ens-cache9.se3[2161,2161,200-0,H], ens-cache19.se3[2169,0], 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)\r\nlast-modified: Thu, 09 Apr 2026 08:28:25 GMT\r\netag: \"69d76329-6c2\"\r\nali-swift-global-savetime: 1780962359\r\neagleid: 9b66d7a717809934791848002e\r\nx-swift-savetime: Tue, 09 Jun 2026 08:24:41 GMT\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 5Ehr3AelidVrFpRasACfLmPIhWbWopZ3C3vxj-p4ZVOwYpbaKz-jtg==\r\nage: 31122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":1730,"size_decoded":2592,"mime_type":"text/css","magic":"ASCII text, with very long lines (1729)","md5":"336e5912fb629270e6ebf3c06010d93c","sha1":"2d39ed993c0efd933b3f84963ed8abd500a7478a","sha256":"4dab5d9c4ede3e04aa46c6ae12a9161899e146c88237ba38d1b716b3319619d3","sha512":"140421e3c5603b661764b2a637d94c402143efe2e70a64018d595d20190d9935a715ceeb8d7c774c0b118c06e8749deb539bab1f50b7db0958059032534d2db7","ssdeep":"","tlshash":"1c3105326791a02cf023dd3628b5bfacbd18d816db5fa6559896b76585ce0c3273120e","first_seen":"2026-04-11T02:46:59.984149Z","last_seen":"2026-06-09T08:26:11.000573Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/favicon.ico","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trusdes.com/","date":"2026-06-09T08:24:41.391Z","timestamp":1780993481391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trusdes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 07:33:00 GMT","end":"Wed, 08 Jul 2026 07:32:59 GMT"},"fingerprint":{"sha1":"F9:E7:66:83:53:52:B0:E6:A0:A7:C3:87:B3:AB:83:99:5D:BF:9A:C7","sha256":"8E:82:F8:EE:93:FB:EB:CF:BB:3F:26:A2:DA:D3:9F:FA:55:3D:6D:CE:15:14:46:E4:92:DB:C1:EF:21:02:66:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trusdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trusdes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\ncontent-length: 138\r\nserver: Tengine\r\ntiming-allow-origin: *\r\ndate: Tue, 09 Jun 2026 08:24:41 GMT\r\netag: \"69d763cf-8a\"\r\nvia: ens-cache8.l2de4[398,397,404-1280,M], ens-cache28.l2de4[399,0], ens-cache14.se3[427,426,404-1280,M], ens-cache16.se3[429,0], 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)\r\nali-swift-global-savetime: 1780993481\r\neagleid: 9b66d7a417809934813695335e\r\nx-swift-error: orig response 4XX error\r\nx-swift-savetime: Tue, 09 Jun 2026 08:24:41 GMT\r\nx-swift-cachetime: 1\r\nx-cache: Error from cloudfront\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: MMeInZ-kJWXGMeD6GM3tBHTWYthdKNI__MCUZdbQV05yZ8mrbXjb6w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":138,"size_decoded":828,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-21T07:34:20.557735Z","times_seen":280875,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/group.html","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://trusdes.com/","date":"2026-06-09T08:24:41.434Z","timestamp":1780993481434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cwconm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:12:57 GMT","end":"Sun, 28 Jun 2026 05:12:56 GMT"},"fingerprint":{"sha1":"01:06:5A:D0:0D:0E:CC:28:F3:29:19:E5:BD:99:DE:40:A6:95:D9:96","sha256":"4C:16:C5:9D:AE:49:51:BB:A4:15:F9:62:9A:CB:24:E6:C2:11:3E:A9:34:D9:1D:FB:FF:5E:46:D0:29:B6:3F:B5"}}},"request":{"raw":"GET /__channel__/B0T/gooll/group.html HTTP/1.1\r\nHost: cwconm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trusdes.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 355\r\nserver: Tengine\r\nx-swift-cachetime: 3600\r\ndate: Sun, 17 May 2026 00:31:14 GMT\r\nstrict-transport-security: max-age=31536000\r\neagleid: a3b55cf017789812585004010e\r\naccept-ranges: bytes\r\nvia: ens-cache32.l2de4[0,0,304-0,H], ens-cache40.l2de4[1,0], ens-cache20.de5[3,3,200-0,H], ens-cache21.de5[7,0], 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)\r\nlast-modified: Mon, 06 Apr 2026 04:39:56 GMT\r\netag: \"69d3391c-163\"\r\nali-swift-global-savetime: 1778977874\r\ntiming-allow-origin: *\r\nx-swift-savetime: Sun, 17 May 2026 01:27:38 GMT\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: BEbC98-iWaXMF75xVAr6g6TirqGY_RyLHbzrCyWslBEJEplnp_6A2g==\r\nage: 2015607\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1117,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5c2c3f9901d81b671e3875d58c1d7d8a","sha1":"308fb0bf5db49c2a837f166e7d3c476b2c78da36","sha256":"f380ddaeaac011b69ef5058b1ea39e28cc656f359705479247f72f227d481f8b","sha512":"dfa4de16de245a2fb3d9ed068723ebb21486d7f445a6d7736526e6d3269565b178629b3cdab3f48d4b46566ef3a8801e6cea79a5fd5744d916db4519d80e3b56","ssdeep":"","tlshash":"7ce0c662bc01863b483347e461ebb900e1588803a2804c50c290e4ff88e4f8acfab2f6","first_seen":"2026-04-08T13:25:50.511656Z","last_seen":"2026-06-19T23:42:05.692407Z","times_seen":69,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ip.faicai888.cc/api/ip-sync/sync","fqdn":"ip.faicai888.cc","domain":"faicai888.cc","tld":"cc"},"ip":{"addr":"172.67.128.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cwconm.com/__channel__/B0T/gooll/group.html","date":"2026-06-09T08:24:43.605Z","timestamp":1780993483605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faicai888.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 16:13:09 GMT","end":"Tue, 01 Sep 2026 16:13:08 GMT"},"fingerprint":{"sha1":"BA:2F:71:82:10:12:B1:93:24:BC:1F:B5:D6:24:2A:69:3D:5A:F7:2D","sha256":"67:59:11:6E:80:CE:40:89:F2:5B:15:09:12:60:6A:00:4B:ED:AD:CA:B7:FB:60:C8:BC:7D:24:B1:FC:9F:0C:5E"}}},"request":{"raw":"OPTIONS /api/ip-sync/sync HTTP/1.1\r\nHost: ip.faicai888.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cwconm.com/\r\nOrigin: https://cwconm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 08:24:44 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nallow: GET,POST,OPTIONS,HEAD\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUr9%2FDH9I%2FKPdC10io9UnXeCy3HTVJ4r4mwpEcVrhRmJ6bg2iSq1ZMoe5HKaNOi6Vzx4h6AvE23r0EyMzGF%2Fm%2BenBzDSQlAiRs4TBTmKGe2wMWEHylR02%2BPBby9GysaTF54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a08ebdd8cd845691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":560,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T07:29:47.333633Z","times_seen":16602482,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":0,"dns":23,"connect":20,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"ip.faicai888.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/__channel__/B0T/gooll/49554fde7424c31c.js","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cwconm.com/__channel__/B0T/gooll/group.html","date":"2026-06-09T08:24:41.525Z","timestamp":1780993481525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cwconm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:12:57 GMT","end":"Sun, 28 Jun 2026 05:12:56 GMT"},"fingerprint":{"sha1":"01:06:5A:D0:0D:0E:CC:28:F3:29:19:E5:BD:99:DE:40:A6:95:D9:96","sha256":"4C:16:C5:9D:AE:49:51:BB:A4:15:F9:62:9A:CB:24:E6:C2:11:3E:A9:34:D9:1D:FB:FF:5E:46:D0:29:B6:3F:B5"}}},"request":{"raw":"GET /__channel__/B0T/gooll/49554fde7424c31c.js HTTP/1.1\r\nHost: cwconm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cwconm.com/__channel__/B0T/gooll/group.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 22005\r\nserver: Tengine\r\nx-swift-cachetime: 3600\r\ndate: Fri, 15 May 2026 04:07:22 GMT\r\nstrict-transport-security: max-age=31536000\r\neagleid: a3b55c9617788180421666807e\r\nvia: ens-cache26.l2de4[565,565,304-0,H], ens-cache39.l2de4[567,0], ens-cache22.de5[757,758,200-0,H], ens-cache2.de5[761,0], 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)\r\nlast-modified: Tue, 07 Apr 2026 13:45:22 GMT\r\netag: W/\"69d50a72-c5bf\"\r\ncontent-encoding: gzip\r\nali-swift-global-savetime: 1778818042\r\ntiming-allow-origin: *\r\nx-swift-savetime: Fri, 15 May 2026 04:07:22 GMT\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: PM6e483wKOXBKuq89_DMQO-cIZsiRJTMYzLTUdoynnsh3bWTZWRsfg==\r\nage: 2175439\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50623,"size_decoded":22821,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50620), with no line terminators","md5":"91e1c2a62960ff9a817c2d90c12096f1","sha1":"4b8bbe35c6d3542589ab6a1c8b6b70f008980038","sha256":"6bd1148bd1446656cbf44218f28379a7c62a5374cf2c3a5729fead87e1c02811","sha512":"9f77fb2d9b61f30adf6a373a501f738f252c07453591c1025b0b37326b731dc5f4bed4e299144bf532474bd850304a015df8dd210d0909e23fff29e27322387d","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXGb9aM3:Hz9qQEyruiDyTcNaKldXGz","tlshash":"34337deea38026dc5cb4cce7a53706ad63f8db076c14326db38bae91b45f7109950729","first_seen":"2026-04-21T01:58:06.820047Z","last_seen":"2026-06-09T08:26:11.002717Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ip.faicai888.cc/api/ip-sync/sync","fqdn":"ip.faicai888.cc","domain":"faicai888.cc","tld":"cc"},"ip":{"addr":"172.67.128.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cwconm.com/__channel__/B0T/gooll/group.html","date":"2026-06-09T08:24:53.583Z","timestamp":1780993493583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faicai888.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 16:13:09 GMT","end":"Tue, 01 Sep 2026 16:13:08 GMT"},"fingerprint":{"sha1":"BA:2F:71:82:10:12:B1:93:24:BC:1F:B5:D6:24:2A:69:3D:5A:F7:2D","sha256":"67:59:11:6E:80:CE:40:89:F2:5B:15:09:12:60:6A:00:4B:ED:AD:CA:B7:FB:60:C8:BC:7D:24:B1:FC:9F:0C:5E"}}},"request":{"raw":"OPTIONS /api/ip-sync/sync HTTP/1.1\r\nHost: ip.faicai888.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cwconm.com/\r\nOrigin: https://cwconm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 08:24:53 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nallow: GET,POST,OPTIONS,HEAD\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MM3VK1B%2FmmYioIh5ymM5unbdCDZalA2R4DqhmhrqKPQQdPLka9Xp0Vhoag5sTZM210eTLQDl9f0VjdzeOUzT7QlAzSSio9%2F1t8BXHlzpqsQ8q9AX1xhn2CqT1gJQLe9cKmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a08ebe16d8925691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":554,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T07:29:47.333633Z","times_seen":16602482,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"ip.faicai888.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trusdes.com/","fqdn":"trusdes.com","domain":"trusdes.com","tld":"com"},"ip":{"addr":"108.157.214.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T08:24:38.588Z","timestamp":1780993478588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trusdes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 07:33:00 GMT","end":"Wed, 08 Jul 2026 07:32:59 GMT"},"fingerprint":{"sha1":"F9:E7:66:83:53:52:B0:E6:A0:A7:C3:87:B3:AB:83:99:5D:BF:9A:C7","sha256":"8E:82:F8:EE:93:FB:EB:CF:BB:3F:26:A2:DA:D3:9F:FA:55:3D:6D:CE:15:14:46:E4:92:DB:C1:EF:21:02:66:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trusdes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 694\r\nserver: Tengine\r\nx-swift-cachetime: 3600\r\ndate: Tue, 09 Jun 2026 07:48:14 GMT\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\nvia: ens-cache25.l2de4[0,0,304-0,H], ens-cache5.l2de4[1,0], ens-cache7.se3[0,0,200-0,H], ens-cache20.se3[29,0], 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)\r\nlast-modified: Mon, 13 Apr 2026 07:51:09 GMT\r\ncontent-encoding: gzip\r\nali-swift-global-savetime: 1780991294\r\neagleid: 9b66d7a817809934788643559e\r\nx-swift-savetime: Tue, 09 Jun 2026 07:48:36 GMT\r\netag: W/\"69dca06d-4c6\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: rHFrUDg6k1r4Ff3AaA6lxkfZ2IjFPL8ZuFcsUtUb-LHnVWYAPIAtBw==\r\nage: 2184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1222,"size_decoded":1480,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3ffee61e785fc84fb47b255af522a3ed","sha1":"c6b899c42b4a3a921f90e8b885066505afd2cfa1","sha256":"42f90db2def481bd1b30f18cc2a66c76b2e3a93265841cb26ae15ebfac601be4","sha512":"59f1ee434dd6a6b004f5be93df22a427ed1848920071cb70fb6c322094903840ba35e793c3c7386e9791297eef0934c8ea53d249c26cc3452b1a9b7eba744e2c","ssdeep":"","tlshash":"d521f146ace2c5284cb0794860b0e42c54d9b6a69757d49675edd07ccf58fcd8c0b9ac","first_seen":"2026-06-09T08:25:09.034042Z","last_seen":"2026-06-09T08:26:11.001896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":172,"connect":8,"send":0,"wait":148,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cwconm.com/c.js","fqdn":"cwconm.com","domain":"cwconm.com","tld":"com"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trusdes.com/","date":"2026-06-09T08:24:39.351Z","timestamp":1780993479351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cwconm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 05:12:57 GMT","end":"Sun, 28 Jun 2026 05:12:56 GMT"},"fingerprint":{"sha1":"01:06:5A:D0:0D:0E:CC:28:F3:29:19:E5:BD:99:DE:40:A6:95:D9:96","sha256":"4C:16:C5:9D:AE:49:51:BB:A4:15:F9:62:9A:CB:24:E6:C2:11:3E:A9:34:D9:1D:FB:FF:5E:46:D0:29:B6:3F:B5"}}},"request":{"raw":"GET /c.js HTTP/1.1\r\nHost: cwconm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trusdes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 2689\r\nserver: Tengine\r\nx-swift-cachetime: 43200\r\ndate: Tue, 09 Jun 2026 05:11:41 GMT\r\nexpires: Tue, 09 Jun 2026 17:11:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nvia: ens-cache25.l2de4[391,391,304-0,H], ens-cache17.l2de4[393,0], ens-cache13.de10[414,413,200-0,H], ens-cache13.de10[418,0], 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)\r\nlast-modified: Tue, 14 Apr 2026 16:33:01 GMT\r\nali-swift-global-savetime: 1780981901\r\neagleid: a3b5fea117809819008913513e\r\nx-swift-savetime: Tue, 09 Jun 2026 05:11:41 GMT\r\netag: \"69de6c3d-a81\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: dmoNq6qw_3VkEjdjtjZiFIuh_6RdpALZbXm05uQqca2cUDTGd0iIRQ==\r\nage: 11578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2689,"size_decoded":3571,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1535)","md5":"bd7bf30da5efd4b7ca5e72b0a8f871b1","sha1":"c117254da1bac8f888b018a9f7702292f9614b44","sha256":"15a48414c08198998bf489f38ef368945fd4f87d344924e4dfddd1dee22be4c8","sha512":"bec4dd231d468d8f04afeff556bb06dfc751cc94dc04001c31aed1e0450dc96ab5dcdb5423145e924cd41385e1f92099ebfdb0fa0003fc196b3c6fcfd2f5b04d","ssdeep":"","tlshash":"155166f5337b2a3053a525d170bef79935b272102d0b8480905dd1887db9deb4679cac","first_seen":"2026-04-18T19:49:25.357376Z","last_seen":"2026-06-09T08:26:10.998706Z","times_seen":4,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":159,"connect":8,"send":0,"wait":34,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cwconm.com/__channel__/B0T/gooll/group.html","date":"2026-06-09T08:24:53.562Z","timestamp":1780993493562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 04:20:37 GMT","end":"Mon, 13 Jul 2026 05:20:21 GMT"},"fingerprint":{"sha1":"60:6C:BE:D9:28:21:96:86:05:50:95:89:A5:98:38:82:EF:9A:2A:FD","sha256":"3F:8E:84:AD:B6:03:00:4D:70:F9:8E:57:27:21:5E:59:F0:9E:7F:52:CF:BA:86:DD:F5:8E:F9:94:BC:19:FC:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cwconm.com/\r\nOrigin: https://cwconm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 08:24:53 GMT\r\ncontent-type: text/plain\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=xMdxRwUYsZGC5zK6zTZKCp9D24M2AK8v_0liUzrMKHg-1780993493.5613704-1.0.1.1-tEn6dAooJr6t.pH1HDDGXKdcy3NlviQ.GvbPnOeTk3jaR7zd6phreS2zigCHg.NgN0KsxUF4NOklHA9MRVUcWp58gZEnSH.HcZHV3_qLjd9nSQ.EjvHyHWBdv48yy3Ug; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Tue, 09 Jun 2026 08:54:53 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a08ebe16c957712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":628,"mime_type":"text/plain","magic":"ASCII text","md5":"67bca3c725f41cb5088b835a2b6549af","sha1":"a4aad7f09894cd5e75198b1ba595ddf896dafeec","sha256":"3a9b3d658b3171e02d6c1b7200b0f3be0949daf80252e2f38b137fcfde826e06","sha512":"a724055ae57f16bdd3bc10a399578e01825bc5794867648d21b27926cab5d91aafeb047b6fa5c9aaf271678f0ece181a26f0e9bb172e870d06e6871984b3bfef","ssdeep":"","tlshash":"9060008200320a0200800200008000308082028220828c00838822300800000a000030","first_seen":"2025-12-17T23:19:04.362166Z","last_seen":"2026-06-20T23:33:46.518383Z","times_seen":77,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cwconm.com/__channel__/B0T/gooll/group.html","date":"2026-06-09T08:24:43.560Z","timestamp":1780993483560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 04:20:37 GMT","end":"Mon, 13 Jul 2026 05:20:21 GMT"},"fingerprint":{"sha1":"60:6C:BE:D9:28:21:96:86:05:50:95:89:A5:98:38:82:EF:9A:2A:FD","sha256":"3F:8E:84:AD:B6:03:00:4D:70:F9:8E:57:27:21:5E:59:F0:9E:7F:52:CF:BA:86:DD:F5:8E:F9:94:BC:19:FC:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cwconm.com/\r\nOrigin: https://cwconm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 08:24:43 GMT\r\ncontent-type: text/plain\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=Yyk1IqyTFCWUKrzvcC8ZA9W6t20G8J3UqJ_zwaecaJs-1780993483.5791488-1.0.1.1-53mbRtX.uL_yn8mbK5FmYcd8J.YMwGGqRMXWHHEulb1CC.ye6mqzHS_AqLhS1L2WWKidQ.M5hlazotcf3.ssrvdcpnxBw0yTfblGyXE9mHvk1uTE2gCue1qnScbr_BWs; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Tue, 09 Jun 2026 08:54:43 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a08ebdd85958712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":628,"mime_type":"text/plain","magic":"ASCII text","md5":"67bca3c725f41cb5088b835a2b6549af","sha1":"a4aad7f09894cd5e75198b1ba595ddf896dafeec","sha256":"3a9b3d658b3171e02d6c1b7200b0f3be0949daf80252e2f38b137fcfde826e06","sha512":"a724055ae57f16bdd3bc10a399578e01825bc5794867648d21b27926cab5d91aafeb047b6fa5c9aaf271678f0ece181a26f0e9bb172e870d06e6871984b3bfef","ssdeep":"","tlshash":"9060008200320a0200800200008000308082028220828c00838822300800000a000030","first_seen":"2025-12-17T23:19:04.362166Z","last_seen":"2026-06-20T23:33:46.518383Z","times_seen":77,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}