{"report_id":"9c6a763f-7e82-4792-83d6-779961d7dd00","version":0,"status":"done","tags":[],"date":"2026-09-05T06:16:58Z","url":{"schema":"http","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":0,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"final":{"url":{"schema":"http","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"title":"安徽道地情医药有限公司","dom":{"size":20108,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (387)","md5":"194bc0477e3cd59f9f69bfdc2d3ca229","sha1":"49d658a7caac23f672acd2062830b5e633635018","sha256":"19f323920e270ab9221ea92a7e29994d91f270acae49d6baca1a56a5793f2010","sha512":"9adba6e66b99e89a15d2dfbb703e7ce9874bc1873f6c0e9b3d5b63c2adff82a0b5d0da4178e2101f13287c5139b0fd9906ae62afc76a9c57c5063e87b545064b","ssdeep":"384:kWadwC64/7bYujgry9JQgmYAVjyAFVjDiOAQgoccCmKF0alC:paCC64/7bzOgmpBvFBDiOAQgoccCmKan","tlshash":"9792832198e6182b405285d8ea60af5fbbd5f107c6179a45b3fc0bd5df87e86cc1360e","dom_hash":"domhash503f6ad73ae4145c4ce64bd6e1e7eda5","first_seen":"2026-09-05T06:17:05.667883Z","last_seen":"2026-09-05T06:17:05.667883Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":0,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T06:16:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ddqyy.top","ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"domain_registered":"2026-07-20","domain_rank":0,"first_seen":"2026-09-05T06:17:00.089792Z","last_seen":"2026-09-05T06:17:00.089792Z","alert_count":35,"request_count":35,"received_data":1175544,"sent_data":13513,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/classie.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6f83dddc3046fbcc85b0455f6fdeaa7","sha1":"af91867846a859135bae82e8dc3c6fc8b1ded37c","sha256":"1282d32477d350755e6dffdcb1162d50a76c4ebece519b15ed864892dcace9df","sha512":"2494f7bbbc800a2ae7f3901f52d7336bbcbda6505124a968d14119fb18eb471f07be40f9fec02449d27c16b9def7777c874c855de95fcecd1b5179ee75130dc9","ssdeep":"","tlshash":"ec41694c34a724fb44e3a1af136f60143168c817d648992239fec3815f391a8a5e9fec","size":2093,"data":"","first_seen":"2023-03-13T11:20:07Z","last_seen":"2026-09-05T06:17:05.672493Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.shuffle.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e63d2758c422690cf15b414767cd5a03","sha1":"a6c3e23aa62d52b353c89d86ce0519edc1134b2d","sha256":"58ac0d33852af6a489c8eeed257c285ce4111a13e854491bbdf0ec210ebf4a3b","sha512":"074b3480febe38ff6c5b3cf8470f17ee3dadb64ac1a4f8e7a426dfc532070462ee751fbf63142dca3a29a4fdfbc8825f4aa84acd1fc39981d5e090ccb417a79e","ssdeep":"192:xfTXpEx4WeRrmF44kZ1HUCdRIaGPKSvjdqADJch2bMj/E1hba032XI:ZTXpmFwTIaLedqA9Mj/GLsI","tlshash":"0832b64a31d07216a263b4e181ff940b303e9c6a7e16896c747acac96f3a54d6077f39","size":11599,"data":"","first_seen":"2023-04-05T01:50:49Z","last_seen":"2026-09-05T06:17:05.706059Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0c65117a371774199d1570d3641fc6a","sha1":"8d1953ed554ce71c8c27e6a9bd42065bd3b0f0cf","sha256":"4c453202ce6d844a4fce9bb4df77b9dc8e48092b8553663b47acbab8bb25d595","sha512":"7946b8b1cc678b2218fbd34ce873aae2dc2dc8eeef20d71dc6fe6978d92d9e56764a17c27138baad4b022ae86487cb7beb2565b221f2e9247c5237307dfb565d","ssdeep":"","tlshash":"4901231cf29d147c02f35046acec72c9cb292301cc8b743ed15581e55a8f27a10d6d54","size":662,"data":"","first_seen":"2026-06-30T23:31:26.742261Z","last_seen":"2026-09-05T06:17:05.72883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-05T06:17:05.691115Z","times_seen":27941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/modernizr-2.6.2.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"242447948cde5fc997aff2b1b36bf74c","sha1":"897d01634e1728d281fa5c6e27f37d1d7652290c","sha256":"73700dd9945ac0c617b55ca5ac81623cdaaca91c6585833d9429c454e039d849","sha512":"da8f81534da90df3f360159033aeedc386c54080a24100cb6e83280b54d82f40f6050e6bdac7bd61cd9d36b88dbaac03ad0f812bc52909eed3c04bec129daa89","ssdeep":"192:EwfBl21ZyeKQob1dHYPeIny6L8LDDhWwpy8b7z:lfBl21ZyeKQoZRY5y6SHh1pz","tlshash":"2d02c6c87642f217879710ba507f410bf275e8baa8088d50e045d9f8bd709b8467ff1e","size":8372,"data":"","first_seen":"2023-05-23T01:07:30Z","last_seen":"2026-09-05T06:17:05.670402Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.themepunch.tools.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff2be50fbaaf60e26cd022218f639822","sha1":"dc9889af0e3d11dc79521a8d7c231d7c39ffbfd6","sha256":"bf47bc03c1c1ff93c041eb5a34e4c9471e4e64e0e0c672599f996fc7a972b119","sha512":"9eca002640ed04243692c1dced07299fe807cb68eb6b2520b576e8ff771c94936537944e2b4ecae3c65d87b22102b8f372bd4dafff37de67ddb948d26aebcec8","ssdeep":"1536:nxW4OHKIJrO2XQFCPNw+1WzGtYa1Jse0UnCzcf28I9H3+jM1NKzA8ifRVy9m:nPI5a+w7zGWa1J7nCz/8I9+jyt+m","tlshash":"27a33aca7251702145d721e5917f0683723ba8aa740e892cf258d9de3d3c9c922fbf76","size":98511,"data":"","first_seen":"2023-03-07T12:07:36Z","last_seen":"2026-09-05T06:17:05.684674Z","times_seen":1703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/owl.carousel.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffaa3c82ad2c6e216e68aca44746e1be","sha1":"2fa7c468110fa68f1f3df6718daf971871623ee9","sha256":"83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91","sha512":"4dc195ca7796b980f4ff1fffec7ec069910501116b826e23651eae4dc8b154acc40a74011eb8aafb60b30d029357b007116a51c90c43d84b91496c50d724deaa","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc7mThcGP:1cZelJ78m2c58","tlshash":"29038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","size":40401,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-09-05T06:17:05.685411Z","times_seen":9625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/custom.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d18af1a2a4db71a42bfeccb99651a99","sha1":"1bd5162b18ef81c75c3cceb31b0128b6cb14c4d0","sha256":"38cd66ebecee57c55c737c74059a4f11fe6ae21d2ef6bdbfcf7d7d06d2412e01","sha512":"c6dae9543b9cd6ec6871ace27798734dbab153a02a8e47b638837fd3b7d1275915f71468ee8add04c39f2d9c28b46f1da790319b878f7a5e9d37771f2fc90ce5","ssdeep":"96:0hItDnB4O9panp8tHYweet2/KL8F/PpSiZqvyLleUFKNyFlK7KYWPmcOKD5fiWL+:0KbB4KS8tHl2/oEPkikvyLAiCqa4jOcG","tlshash":"47c1631ab07170111037717b4b3f4909393a401b6e0bfe05b6ae0b842f9d4aea7b7b9d","size":6064,"data":"","first_seen":"2024-08-19T19:31:28.66433Z","last_seen":"2026-09-05T06:17:05.712219Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.mmenu.all.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd1a44bb3ed1933b01935c775f0a5612","sha1":"3621f8040b6ace21e0837085f7ac27b2bf5afde8","sha256":"29090a2759245cdf8b76b6077ec8832f9f1f09968f828f6599082510dd578588","sha512":"1a891a9b935a74a1b7da0626e0f8ecb768bda2c29fb196f3d9bc9513bd7d8138ffc458c6ad2dc4cafe94309f0e63c7ab7c2f34225a634274fd0d57410df37807","ssdeep":"768:Tl2zhUXA4mBVz07aSVhGI6nXuhch5lVJ5g+hL+UQBbceT4aZ:eUXaYtvGICYMfVHh+Ule","tlshash":"1d23f85d708431e585bbe1e661ef900aa433083d5106c84c727dead94e7ea1929e3ffe","size":47657,"data":"","first_seen":"2023-03-07T15:07:55Z","last_seen":"2026-09-05T06:17:05.677593Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/bootstrap.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","size":35951,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-09-05T06:17:05.675655Z","times_seen":10844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/wow.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"40d8385730e212732209b2268ee704c4","sha1":"8d1fdeeff2d5319719d1ee26ddb49086f532d6ed","sha256":"914153d308670b304cc3d167b82bed9f7e6a3923e7ae9eda46fe87dac9040c86","sha512":"55d4b3fea43cba8ef3dc21710377e0ce1f679e14c1d0274a7c14e2652cd1fe7037b09750ee4caf9020b4247c4aee150031edf1c8771a17f74405b3f466d7b1f3","ssdeep":"96:iPV6GqKyR6TYATHF/suCvp5OVEE1f3e1gJ1IHImBaokbl:iPVfSWFsuCnOVEEd3eiJmHILoe","tlshash":"b6e166c9bb877031c357a1f6873f0506b33a59ada028047cb6a984e57d74c69523bf78","size":7063,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-05T06:17:05.710261Z","times_seen":915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.themepunch.revolution.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0801758f13b2e6ddcf5cb4d099da8c21","sha1":"b5590446180084aae78c71f40fca4824a81a0aac","sha256":"770f981d80f084f2d2271a8c751756449a11b5ccae8525459f6cb1d37ab89453","sha512":"a5638d640c48167837160dbc8885afbd41e87a284486253f01f9eb3b290acd073a3817753cbfb9e0e04b7b37516e3d67d0c8e5a6127fa34f244a7eeb7a081c97","ssdeep":"1536:TjM377PlyX0JwMl1tdKcRbCGOA89TgJX9tnw5aKrb49wPS7Kg7K7kRwKhK/M674E:Tj0zn1KRjb748jpoImsYgv","tlshash":"72b32a297640207696dbb267825f91092372bc3b8e03c90576b6d4700fb5c8a7f7af9d","size":113138,"data":"","first_seen":"2023-03-07T01:36:42Z","last_seen":"2026-09-05T06:17:05.702079Z","times_seen":1478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.fancybox.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5ae8732d2e00fe26e3c90c8f9bd432","sha1":"23a42f70c71f42afed832235c26c370fcfa8ebbf","sha256":"7bfb1c9a4eec0632755c5fbd77a029f3602cfc31dc679bfc3044bf981fee26d3","sha512":"2907f8175f4c36b81c00d032b1c92b8e4a55a64bea32060c1a757b13097097d2fb63e082818d50865107ec5531b427b416ea1b969eb88c15aa3e18c1df566f9b","ssdeep":"192:zTh6som2N2WYBz/kFRFMrCxXMKn7w2h9dcS9sBjEmG6cn1mGF2R7Y6dLjUe/mMyu:z16NNsNkHFCa7X9dc9gpejUImMyLssR+","tlshash":"02a24a44b2507e1681bb1a62514f100da232091bd717cab6f47ce9e85af5bc432b7fee","size":23255,"data":"","first_seen":"2023-05-23T01:07:30Z","last_seen":"2026-09-05T06:17:05.703545Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/modernizr-2.6.2.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.647Z","timestamp":1788588992647,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/modernizr-2.6.2.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f62-20b4\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8372,"size_decoded":4215,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8202)","md5":"242447948cde5fc997aff2b1b36bf74c","sha1":"897d01634e1728d281fa5c6e27f37d1d7652290c","sha256":"73700dd9945ac0c617b55ca5ac81623cdaaca91c6585833d9429c454e039d849","sha512":"da8f81534da90df3f360159033aeedc386c54080a24100cb6e83280b54d82f40f6050e6bdac7bd61cd9d36b88dbaac03ad0f812bc52909eed3c04bec129daa89","ssdeep":"192:EwfBl21ZyeKQob1dHYPeIny6L8LDDhWwpy8b7z:lfBl21ZyeKQoZRY5y6SHh1pz","tlshash":"2d02c6c87642f217879710ba507f410bf275e8baa8088d50e045d9f8bd709b8467ff1e","first_seen":"2023-05-23T01:07:30Z","last_seen":"2026-09-05T06:17:05.670402Z","times_seen":46,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":634,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/classie.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.661Z","timestamp":1788588992661,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/classie.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f6a-82d\"\r\nExpires: Sat, 05 Sep 2026 18:10:03 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2093,"size_decoded":1103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a6f83dddc3046fbcc85b0455f6fdeaa7","sha1":"af91867846a859135bae82e8dc3c6fc8b1ded37c","sha256":"1282d32477d350755e6dffdcb1162d50a76c4ebece519b15ed864892dcace9df","sha512":"2494f7bbbc800a2ae7f3901f52d7336bbcbda6505124a968d14119fb18eb471f07be40f9fec02449d27c16b9def7777c874c855de95fcecd1b5179ee75130dc9","ssdeep":"","tlshash":"ec41694c34a724fb44e3a1af136f60143168c817d648992239fec3815f391a8a5e9fec","first_seen":"2023-03-13T11:20:07Z","last_seen":"2026-09-05T06:17:05.672493Z","times_seen":18,"resource_available":true,"data":null}},"time_used":1316,"timings":{"blocked":1085,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/uploads/allimg/260731/1-260I10935130-L.jpg","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.675Z","timestamp":1788588992675,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/260731/1-260I10935130-L.jpg HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 31 Jul 2026 01:35:13 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bfbd1-36c7\"\r\nExpires: Mon, 05 Oct 2026 06:10:03 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14023,"size_decoded":13123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 320x320, components 3","md5":"7655bf7b1f03726ed7e5a330f318580e","sha1":"653354f9cebb39b33eb8fc27c23217759f66b2d0","sha256":"76fb81376e94e93ae4177a6766611c0d020055858c438e1f104f5c182ba4b27f","sha512":"0f0aa685de9e409fcc3b750f12070ef5b41dc033e8d256ccc9968272a99077532be8c7efa29d5ab739428a6c4d19f6776fe5d040c1fb18debfb49facf0f67414","ssdeep":"192:TJy5Ig4Ihxd4BQhNdJhMcOd8mI5RARmaaGd0F7ibd0mxAUKxpALYX34gMg9M:T85I2hxd0SNdJfOIeRMGd0demmWJ9MaM","tlshash":"5452bf63c4598ee3bf40d3697f809d0057ca8206a0de33d565c63e6a3b8ade3534ab49","first_seen":"2026-09-05T06:17:05.674041Z","last_seen":"2026-09-05T06:17:05.674041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1832,"timings":{"blocked":1595,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/bootstrap.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.648Z","timestamp":1788588992648,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/bootstrap.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f64-8c6f\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35951,"size_decoded":11354,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-09-05T06:17:05.675655Z","times_seen":10844,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":645,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.mmenu.all.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.665Z","timestamp":1788588992665,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.mmenu.all.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f70-ba29\"\r\nExpires: Sat, 05 Sep 2026 18:10:03 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47657,"size_decoded":14596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10159)","md5":"fd1a44bb3ed1933b01935c775f0a5612","sha1":"3621f8040b6ace21e0837085f7ac27b2bf5afde8","sha256":"29090a2759245cdf8b76b6077ec8832f9f1f09968f828f6599082510dd578588","sha512":"1a891a9b935a74a1b7da0626e0f8ecb768bda2c29fb196f3d9bc9513bd7d8138ffc458c6ad2dc4cafe94309f0e63c7ab7c2f34225a634274fd0d57410df37807","ssdeep":"768:Tl2zhUXA4mBVz07aSVhGI6nXuhch5lVJ5g+hL+UQBbceT4aZ:eUXaYtvGICYMfVHh+Ule","tlshash":"1d23f85d708431e585bbe1e661ef900aa433083d5106c84c727dead94e7ea1929e3ffe","first_seen":"2023-03-07T15:07:55Z","last_seen":"2026-09-05T06:17:05.677593Z","times_seen":192,"resource_available":true,"data":null}},"time_used":1538,"timings":{"blocked":1307,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/fonts/fontawesome-webfont.woff2","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:33.889Z","timestamp":1788588993889,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/skin/css/font-awesome.min.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 56780\r\nLast-Modified: Fri, 15 Mar 2019 07:08:34 GMT\r\nConnection: keep-alive\r\nETag: \"5c8b4f72-ddcc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56780,"size_decoded":57015,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-09-05T06:17:05.678301Z","times_seen":31390,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/fonts/flaticon.woff","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:33.890Z","timestamp":1788588993890,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/fonts/flaticon.woff HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/skin/css/flaticon.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: font/woff\r\nContent-Length: 19440\r\nLast-Modified: Fri, 15 Mar 2019 07:08:16 GMT\r\nConnection: keep-alive\r\nETag: \"5c8b4f60-4bf0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19440,"size_decoded":19674,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19440, version 0.0","md5":"29a81c7ffa70dd78b1beb779af32a3af","sha1":"3f4c6f8fc5288362d10e2b510df99479e5d99beb","sha256":"99830a713040643096af9d9a771d10505746993a2ffabaa04179f83f58b94cc4","sha512":"cbaddd8717809a42ac52cd9ab8ff2b760e0fbfa4687a9a600283518d72fa6cf9c8289b3e1233bfce1b6c378ece4e21bae4fcbd4d84eac8f1c952f1714887e41e","ssdeep":"384:Zzoa6gHw3Iy9987xKSRXrI5xnfKuQS+3zG6vTcTiZMYgVBJG2HSpBpq3BRm2U15V:Zzx6XB279rI5RjAzG6vmiZ7C7pYBkqtt","tlshash":"d092c1211e986097f005c5b8ff8f80497d592721387d425ed8ccaece2e606da9b743ba","first_seen":"2024-08-19T19:31:28.671423Z","last_seen":"2026-09-05T06:17:05.678994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/animate.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.636Z","timestamp":1788588992636,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/animate.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-ce60\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52832,"size_decoded":5006,"mime_type":"text/css","magic":"ASCII text, with very long lines (52663)","md5":"ddf3cef208220cd443c3f5a00acb30ca","sha1":"7e0865c27e9b6a5c9d13cba8e721534e24c0ee38","sha256":"aea4a78ab801d033d6ab959b7d613602553c4f713d1a132684839b2f9c30bae5","sha512":"e2b6dbfb7577215a099b30777806446b2095c6763297db461e1eeaa35d49ab3dc8d47179c2fb8e703ed22ac6e2bd1ed85202a8d73dda98a6fdc9db4b93ad590d","ssdeep":"768:nkZlIbIgxnIoImI1wO1CA5kiDb3CyQ5xrQe/0STbsysb:nkZSI1wO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"283305af5891229991674f6283cc5e68872dc66714621cde33817c4b8f87faf33da607","first_seen":"2025-09-28T11:18:26.321837Z","last_seen":"2026-09-05T06:17:05.680744Z","times_seen":6,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":226,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/responsive.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.644Z","timestamp":1788588992644,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/responsive.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 16 Mar 2019 07:11:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8ca1a2-1e04\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7684,"size_decoded":2233,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8088a5f24643072e23368fffd46cd0d8","sha1":"7ba92c2c70b71ca3a6639d9f465d209823f06ee3","sha256":"efa4931ff68cb150f41eeb261db87d072e925b354e1183e92b4ba53e123e572a","sha512":"1a736376fb3590cc9a724bc48fc292a0dbb299b9647c42a88b9556f0474a46444bf34e46fe38cca950dbc674a0fa8013e4bbcbfe408ed2a68c248d472d49001a","ssdeep":"96:dmroQmjQnjkHnraxOmghgfBLESA7TndFaragqTHWKeB47Y+PDJrrRP2Mlsqv+kWZ:BujqWx6Ms/r3eSbHieup","tlshash":"8df1ffdcefc6300d13456b6de7ba05166e2c1cf68b4f50dd60e2ea1ca78776923226c4","first_seen":"2026-09-05T06:17:05.682565Z","last_seen":"2026-09-05T06:17:05.682565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.themepunch.tools.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.656Z","timestamp":1788588992656,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f64-180cf\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98511,"size_decoded":38202,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25522)","md5":"ff2be50fbaaf60e26cd022218f639822","sha1":"dc9889af0e3d11dc79521a8d7c231d7c39ffbfd6","sha256":"bf47bc03c1c1ff93c041eb5a34e4c9471e4e64e0e0c672599f996fc7a972b119","sha512":"9eca002640ed04243692c1dced07299fe807cb68eb6b2520b576e8ff771c94936537944e2b4ecae3c65d87b22102b8f372bd4dafff37de67ddb948d26aebcec8","ssdeep":"1536:nxW4OHKIJrO2XQFCPNw+1WzGtYa1Jse0UnCzcf28I9H3+jM1NKzA8ifRVy9m:nPI5a+w7zGWa1J7nCz/8I9+jyt+m","tlshash":"27a33aca7251702145d721e5917f0683723ba8aa740e892cf258d9de3d3c9c922fbf76","first_seen":"2023-03-07T12:07:36Z","last_seen":"2026-09-05T06:17:05.684674Z","times_seen":1703,"resource_available":true,"data":null}},"time_used":1308,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":237,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/owl.carousel.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.659Z","timestamp":1788588992659,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/owl.carousel.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f5a-9dd1\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":40401,"size_decoded":12613,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32068)","md5":"ffaa3c82ad2c6e216e68aca44746e1be","sha1":"2fa7c468110fa68f1f3df6718daf971871623ee9","sha256":"83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91","sha512":"4dc195ca7796b980f4ff1fffec7ec069910501116b826e23651eae4dc8b154acc40a74011eb8aafb60b30d029357b007116a51c90c43d84b91496c50d724deaa","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc7mThcGP:1cZelJ78m2c58","tlshash":"29038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-09-05T06:17:05.685411Z","times_seen":9625,"resource_available":true,"data":null}},"time_used":1106,"timings":{"blocked":870,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/tk.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.645Z","timestamp":1788588992645,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/tk.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 31 Jul 2026 00:57:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bf2f8-735d\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29533,"size_decoded":7855,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (379)","md5":"eb0a38847d874cff61b5e80333b8e7ce","sha1":"951225e18e98c7a6fcd1cccf1674ba909ed7e34b","sha256":"69dd504eac329adeec49c5d123c97be1d256eb5c88ae87c57fdcf9996f52b222","sha512":"f35e09d34fdc164d4368ceef6285c88e9ef86549bddda4748a73f0f7494bef8a6dc9a50f0f8b2bc0fa4dd63f6282a6c4feadac191b0140eed924d93564b38cf9","ssdeep":"768:Ktn52mEkOohqUVaNDqnDnAfaRtN8NNwoPLiOAEm7y86EiJFT:+9hqUVaNDADHNoNwyiO8IEiJFT","tlshash":"b5d261267b612c89b11ba1fdbf95ab541b0e9016df0e7ebab810382cd3cc5d4527368d","first_seen":"2026-09-05T06:17:05.686139Z","last_seen":"2026-09-05T06:17:05.686139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/jquery.mmenu.all.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.664Z","timestamp":1788588992664,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/jquery.mmenu.all.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-ac45\"\r\nExpires: Sat, 05 Sep 2026 18:10:03 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44101,"size_decoded":7739,"mime_type":"text/css","magic":"ASCII text, with very long lines (484)","md5":"53885888701273513a7d8ca0b16fe7dc","sha1":"686c259f78fc2dac0a3df59c8a00fe74d7800c46","sha256":"95fb161a1d0cde405c7bc6e5c24dbb14188d9d9715cd98bb37ba393bc5727f9b","sha512":"d988f5160ef34b23c552f64bd2de3e684f9c19dd0f5b709b775bd666d78db48a52828845f85ede3ae2f49fbfe51af6b69564526282523d2afa2b4a99910d9b98","ssdeep":"768:TMugh1OxjUwEG9VswTfS6Gc/HWxU/UEBd1VWCos1n/TifUeY7YRpyxleB4YjMfsS:TMugh1OxjUwEG9VswTfS6Gc/HyEBd1Vj","tlshash":"3713ac266da211cd201aa77fd6c90fbc5b3dd1016b520dfbe70a504bcf8ae5b74e4a42","first_seen":"2023-05-23T13:25:41Z","last_seen":"2026-09-05T06:17:05.687961Z","times_seen":205,"resource_available":false,"data":null}},"time_used":1360,"timings":{"blocked":1125,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/uploads/allimg/260731/1-260I1093T40-L.jpg","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.673Z","timestamp":1788588992673,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/allimg/260731/1-260I1093T40-L.jpg HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 31 Jul 2026 01:38:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bfca4-863a\"\r\nExpires: Mon, 05 Oct 2026 06:10:03 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34362,"size_decoded":34052,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 320x320, components 3","md5":"92422f77381c8b0cae1b71927ed85c4f","sha1":"b10b5e1b6a0fb0e0933fcaa27a098360fa305cfc","sha256":"d0bc46b1d47dd54e791818fff29d3792c2873fa912fe2ef49af84f988fe25f78","sha512":"9bc4407959d2a48c2bdd656a1a6bb6143f3aca2f4c8e5a1482360d93a9c0ccbc0fe7ff55c292662a7ddd04393e75eae405b96ede2a1851cb0894b8eb4d9a43d1","ssdeep":"768:TL1r5X5zN6gEDC+seHBIOg6wMuH7HR/OFBfMwkQR:TJXh6g0CsHjg6w57V7wx","tlshash":"43f2d0024bd78fe7d890d7e2ff874ca092cb120509c436ca61f8265f5fa9db1a7a109d","first_seen":"2026-09-05T06:17:05.688673Z","last_seen":"2026-09-05T06:17:05.688673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1829,"timings":{"blocked":1592,"dns":0,"connect":0,"send":0,"wait":236,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/favicon.ico","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:35.169Z","timestamp":1788588995169,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-05T07:01:59.51307Z","times_seen":556811,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.646Z","timestamp":1788588992646,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f60-176f8\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95992,"size_decoded":37874,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-09-05T06:17:05.691115Z","times_seen":27941,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":624,"dns":0,"connect":0,"send":0,"wait":237,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/uploads/260731/1-260I1092212503.jpg","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.677Z","timestamp":1788588992677,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/260731/1-260I1092212503.jpg HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 31 Jul 2026 01:22:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bf8c4-13807\"\r\nExpires: Mon, 05 Oct 2026 06:10:03 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79879,"size_decoded":60680,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=800], baseline, precision 8, 800x800, components 3","md5":"ccfa48a765b660289d8cdedf968a5b84","sha1":"e03427bc790cd2d42f5f579409e634fe2e2eac17","sha256":"5f768d3b2e9a437ebfa4b39474b92360362171138ba7bea6ba18869f02081053","sha512":"a6afbfd70ee6d4866caad2bf029dcfdc911043a0738f1d0d585cb4a27c89ce2a1fffda22c01e4e61cb4bd4ec4baeae36f5c224deaa2621f06e96d1d68570aa24","ssdeep":"1536:LBfm9CVTxplc7O7SBw0xbWG5IJjF3ea33RM252JjQxrl3MaUw:ci+xbF6j11C25akl3MaUw","tlshash":"9573be30af2c0bc188c72c235255dd76e3312e90575b27ebbe7e7749276ae00682566b","first_seen":"2026-09-05T06:17:05.692291Z","last_seen":"2026-09-05T06:17:05.692291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2075,"timings":{"blocked":1597,"dns":0,"connect":0,"send":0,"wait":241,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T06:16:27.649Z","timestamp":1788588987649,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T07:58:30.445842Z","times_seen":18289230,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T06:16:30.640Z","timestamp":1788588990640,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:01 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 31 Jul 2026 01:42:45 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bfd95-4e0d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19981,"size_decoded":6101,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387), with CRLF, LF line terminators","md5":"a069ab4c534ba057db840a81d41298ca","sha1":"409991fde7f28e92774652532bc77edcfe2f9b32","sha256":"9502fc720f2d1b346a696f06b404896eae02815c72ef634189eca59b40ba0a8d","sha512":"b6341ae5b041c0e0dfde9d646ac6356e5443bb26cb34ebeaddfb4814024ffda3e4669cf66a8232cac40ae2383990dfe981400472efe58dcaccb8c29bd3517fdc","ssdeep":"384:m1JawSBgYLTVjmADVjLg5QBmoccCrnTY0a2gryZm7:2wTBgYvBbDBLg5QBmoccCrT3a4k","tlshash":"2c929525a8d5182b007285e9e570af5efb94b107c6179a05b3fc0bd78fa7e86cc1364e","first_seen":"2026-09-05T06:17:05.695019Z","last_seen":"2026-09-05T06:17:05.695019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1848,"timings":{"blocked":-1,"dns":3,"connect":230,"send":0,"wait":1614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/flaticon.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.596Z","timestamp":1788588992596,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/flaticon.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f54-1392\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5010,"size_decoded":1413,"mime_type":"text/css","magic":"ASCII text","md5":"8b7a3cf2ad41cb5b6b27d593b3c030f1","sha1":"761981ef2c4a729bc1b4db10ef8ec23b9950f6d3","sha256":"790a709595e8eb34df5083e5d8352082e16efb73e1287f479617e68dcb03307f","sha512":"ac78ca1280e4cc3b9f2e8b9c60cfd16a139a4f4e446e60089181dfb1ed43b584fe94920f650abd38fb9fc41c87177db78b6c010c26e8fdd2e7600bfd0b07f9dc","ssdeep":"96:fEMsNJ28L8FfnLmrvvoY1BcYg/fuWotzO/POBVhpMvT979bHA1K9jNdFgl5lKr2f:fEM5YcS","tlshash":"44a10fa8d92f28925381eed52a693e00cf1cb2288dd1ec59d0127e6df7f3a1193957d8","first_seen":"2025-09-28T11:18:26.391191Z","last_seen":"2026-09-05T06:17:05.697387Z","times_seen":6,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/bootstrap.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.598Z","timestamp":1788588992598,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/bootstrap.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 25 Nov 2021 10:11:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"619f6162-21dc4\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138692,"size_decoded":25609,"mime_type":"text/css","magic":"ASCII text, with very long lines (559), with CRLF line terminators","md5":"ac53b3aa593657f745cf268a9488bf01","sha1":"6b97df7cb6ef377bda19feb80ef05396805a0ae2","sha256":"9522985a698cb13fb674d4c1aa75a7898ae75bb15407f32c0d5a7dae0f2ea5fe","sha512":"c151ae00598db451c4308f51d501c7be4a71379262e9d94f8eefc7755171e1417d70041bc16671af262616324c66c3437be4baded4b93f90fd81cf47d0a7b080","ssdeep":"768:UO/X6MtINhNiX998IJ7mJcFJLchxQ4JoQ/pTiWy1JoJ/vs5UvUzeIZpPn34PEOQo:nvtoLxQLh3r+dHJ73tca","tlshash":"88d36320b91230cf23539bc4b7b0de425f1852b1de5f4dbef1e6289c43d45692a62ade","first_seen":"2026-09-05T06:17:05.699973Z","last_seen":"2026-09-05T06:17:05.699973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":237,"send":0,"wait":237,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.themepunch.revolution.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.657Z","timestamp":1788588992657,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f6c-1b9f2\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":113138,"size_decoded":31351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65205)","md5":"0801758f13b2e6ddcf5cb4d099da8c21","sha1":"b5590446180084aae78c71f40fca4824a81a0aac","sha256":"770f981d80f084f2d2271a8c751756449a11b5ccae8525459f6cb1d37ab89453","sha512":"a5638d640c48167837160dbc8885afbd41e87a284486253f01f9eb3b290acd073a3817753cbfb9e0e04b7b37516e3d67d0c8e5a6127fa34f244a7eeb7a081c97","ssdeep":"1536:TjM377PlyX0JwMl1tdKcRbCGOA89TgJX9tnw5aKrb49wPS7Kg7K7kRwKhK/M674E:Tj0zn1KRjb748jpoImsYgv","tlshash":"72b32a297640207696dbb267825f91092372bc3b8e03c90576b6d4700fb5c8a7f7af9d","first_seen":"2023-03-07T01:36:42Z","last_seen":"2026-09-05T06:17:05.702079Z","times_seen":1478,"resource_available":true,"data":null}},"time_used":1348,"timings":{"blocked":867,"dns":0,"connect":0,"send":0,"wait":244,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.fancybox.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.658Z","timestamp":1788588992658,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.fancybox.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f70-5ad7\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23255,"size_decoded":9779,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22989)","md5":"5e5ae8732d2e00fe26e3c90c8f9bd432","sha1":"23a42f70c71f42afed832235c26c370fcfa8ebbf","sha256":"7bfb1c9a4eec0632755c5fbd77a029f3602cfc31dc679bfc3044bf981fee26d3","sha512":"2907f8175f4c36b81c00d032b1c92b8e4a55a64bea32060c1a757b13097097d2fb63e082818d50865107ec5531b427b416ea1b969eb88c15aa3e18c1df566f9b","ssdeep":"192:zTh6som2N2WYBz/kFRFMrCxXMKn7w2h9dcS9sBjEmG6cn1mGF2R7Y6dLjUe/mMyu:z16NNsNkHFCa7X9dc9gpejUImMyLssR+","tlshash":"02a24a44b2507e1681bb1a62514f100da232091bd717cab6f47ce9e85af5bc432b7fee","first_seen":"2023-05-23T01:07:30Z","last_seen":"2026-09-05T06:17:05.703545Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":869,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/jquery.shuffle.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.662Z","timestamp":1788588992662,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.shuffle.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f66-2d4f\"\r\nExpires: Sat, 05 Sep 2026 18:10:04 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11599,"size_decoded":5093,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11415)","md5":"e63d2758c422690cf15b414767cd5a03","sha1":"a6c3e23aa62d52b353c89d86ce0519edc1134b2d","sha256":"58ac0d33852af6a489c8eeed257c285ce4111a13e854491bbdf0ec210ebf4a3b","sha512":"074b3480febe38ff6c5b3cf8470f17ee3dadb64ac1a4f8e7a426dfc532070462ee751fbf63142dca3a29a4fdfbc8825f4aa84acd1fc39981d5e090ccb417a79e","ssdeep":"192:xfTXpEx4WeRrmF44kZ1HUCdRIaGPKSvjdqADJch2bMj/E1hba032XI:ZTXpmFwTIaLedqA9Mj/GLsI","tlshash":"0832b64a31d07216a263b4e181ff940b303e9c6a7e16896c747acac96f3a54d6077f39","first_seen":"2023-04-05T01:50:49Z","last_seen":"2026-09-05T06:17:05.706059Z","times_seen":28,"resource_available":true,"data":null}},"time_used":2457,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":1357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/settings.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.635Z","timestamp":1788588992635,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/settings.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-cdbc\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52668,"size_decoded":10261,"mime_type":"text/css","magic":"ASCII text, with very long lines (52316)","md5":"6151e3dac07ff3eaffd76235eaa54ad2","sha1":"304f3948c46526aa06f4a73c133212ac53ab4aab","sha256":"ce8d782fad66a10116d595a2f092cecbf9a4227cc86bcde27b9fcabec36f0099","sha512":"798133a6a907ab2e6f2964655a0e95e5a6002be481c9e07bd35c801c5ec53a5ff17e52700e19d130ba8a7f2f958b9672b302e5fe9008458e8b2277ee1e8f2418","ssdeep":"1536:wqAOma5/Me5J/lVHGYyFfKfflZTUstSX7hb:j0fOflZe","tlshash":"df339631d69170a9f227c926b6c1a9f8703dd213ba130faef20775fdd29728a1127749","first_seen":"2026-09-05T06:17:05.708221Z","last_seen":"2026-09-05T06:17:05.708221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":226,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/wow.min.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.655Z","timestamp":1788588992655,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/wow.min.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f6a-1b97\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7063,"size_decoded":2963,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7033)","md5":"40d8385730e212732209b2268ee704c4","sha1":"8d1fdeeff2d5319719d1ee26ddb49086f532d6ed","sha256":"914153d308670b304cc3d167b82bed9f7e6a3923e7ae9eda46fe87dac9040c86","sha512":"55d4b3fea43cba8ef3dc21710377e0ce1f679e14c1d0274a7c14e2652cd1fe7037b09750ee4caf9020b4247c4aee150031edf1c8771a17f74405b3f466d7b1f3","ssdeep":"96:iPV6GqKyR6TYATHF/suCvp5OVEE1f3e1gJ1IHImBaokbl:iPVfSWFsuCnOVEEd3eiJmHILoe","tlshash":"b6e166c9bb877031c357a1f6873f0506b33a59ada028047cb6a984e57d74c69523bf78","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-05T06:17:05.710261Z","times_seen":915,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":644,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/js/custom.js","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.663Z","timestamp":1788588992663,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/custom.js HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Mar 2019 07:08:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f6c-17b0\"\r\nExpires: Sat, 05 Sep 2026 18:10:03 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6064,"size_decoded":2859,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (341)","md5":"8d18af1a2a4db71a42bfeccb99651a99","sha1":"1bd5162b18ef81c75c3cceb31b0128b6cb14c4d0","sha256":"38cd66ebecee57c55c737c74059a4f11fe6ae21d2ef6bdbfcf7d7d06d2412e01","sha512":"c6dae9543b9cd6ec6871ace27798734dbab153a02a8e47b638837fd3b7d1275915f71468ee8add04c39f2d9c28b46f1da790319b878f7a5e9d37771f2fc90ce5","ssdeep":"96:0hItDnB4O9panp8tHYweet2/KL8F/PpSiZqvyLleUFKNyFlK7KYWPmcOKD5fiWL+:0KbB4KS8tHl2/oEPkikvyLAiCqa4jOcG","tlshash":"47c1631ab07170111037717b4b3f4909393a401b6e0bfe05b6ae0b842f9d4aea7b7b9d","first_seen":"2024-08-19T19:31:28.66433Z","last_seen":"2026-09-05T06:17:05.712219Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1883,"timings":{"blocked":1106,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/img/preloader.gif","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:33.836Z","timestamp":1788588993836,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/img/preloader.gif HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/skin/css/tk.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:03 GMT\r\nContent-Type: image/gif\r\nLast-Modified: Fri, 15 Mar 2019 07:08:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f70-331f\"\r\nExpires: Mon, 05 Oct 2026 06:10:03 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13087,"size_decoded":11502,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"af9aaaf93ac64bad47d28e7bf0b76664","sha1":"e9679a1cc53e3b6c658ebfea764cad6f99ad6eb0","sha256":"1a6fd260debb6e41a9d52d423ea2d8a18a928d43bdeee5c7ff544e3eea63466a","sha512":"a472df9c6350d7b40230050a04b9ff122b4d5d0e406d0c69a9bca04e47bba17b19144dc83629653c6986b5113444e2760721a063dbe6b223f0566624ceedb4d0","ssdeep":"192:RdmYhvm8tKzVVWK6jFeu4empXDg/NXP1s7zQqXdBkJhfLoIkjV8cr40eDPz:+aJtiVZcOempASXQqXT8hTZk52","tlshash":"5d426ce2c5640d1e31729bb5aa8eeb8e8037d0be348e75cfad67ea50ac5754145c031f","first_seen":"2023-05-14T01:06:40Z","last_seen":"2026-09-05T06:17:05.714656Z","times_seen":39,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/img/take-look.jpg","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:33.838Z","timestamp":1788588993838,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/img/take-look.jpg HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/skin/css/main.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-05T07:01:59.51307Z","times_seen":556811,"resource_available":true,"data":null}},"time_used":1142,"timings":{"blocked":378,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/owl.carousel.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.633Z","timestamp":1788588992633,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/owl.carousel.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f54-e23\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3619,"size_decoded":1363,"mime_type":"text/css","magic":"ASCII text, with very long lines (3574)","md5":"04639bb8774080e2dc74b060835b102d","sha1":"96b1d3041db1418fa1cb4b2b2d7613a93118af57","sha256":"90cfeff146ee7ee1b6673ec77d3b73018aa5af43f6cd1149d901f4f05458ab99","sha512":"af5117e651e34d275d154bdf9a0d1053523f70f715673946a60cf12a055aecfc54d85b09dfa60ca871d1b79948b6e117e81c4e0386e027b5dc753f3a943e0ca1","ssdeep":"","tlshash":"5071bdd92247329e902bc7660ad819456d3dc893d9360a5da2bbeb0487c7e59003ffcf","first_seen":"2026-09-05T06:17:05.716554Z","last_seen":"2026-09-05T06:17:05.716554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":233,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/jquery.fancybox.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.639Z","timestamp":1788588992639,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-f35\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3893,"size_decoded":1631,"mime_type":"text/css","magic":"ASCII text, with very long lines (3818)","md5":"d09e3e26e594c33ef678f4b19c00dba5","sha1":"5e0c77b975f5bce6bf170e2ca231f7d60e456a7d","sha256":"5575bd74bfeed08f142cab1b9a0acceb6558bae60f327a1780aa30c52d16ec60","sha512":"e45c7646a4b4fbf23a0a99ec6c9d2e42b2b6935c45da9c5447f808d076c64838380caeb897bb710aa702e18be7bafb29d7359830b6e14e5f910cfd9e1144363a","ssdeep":"","tlshash":"dd81ed2314403129a43bde21e75f958de1b2584ae25317ff961cf971cbdabd160f2ac8","first_seen":"2026-09-05T06:17:05.718604Z","last_seen":"2026-09-05T06:17:05.718604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":383,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/offcanvas.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.641Z","timestamp":1788588992641,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/offcanvas.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-14a7\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5287,"size_decoded":1647,"mime_type":"text/css","magic":"ASCII text","md5":"d50f93f7168ce1299c86cbbef9d8c456","sha1":"0af5772005adb140c269c84b8622f0da53d19867","sha256":"fc55a74b071b83cd1610375924b75bdb939a1f0ed0ecbaad537368c4dd72404b","sha512":"f0ed974bf17a8c1b80c96a500f50d0fd901886e99e874609e1998e09db5d02371d2a29b078fa691616e2052ad60afc2e52ed72356ca2652e690ab0bf599c0020","ssdeep":"96:YuCYwjAwLyQgcPwjAwCZdg7C1FPrW1aPrL3H5Y65tUSHtOoQHr3:PCYwjAwLyQgcPwjAwCZdg7C1FPK1Q3Zq","tlshash":"d2b1de684bc311439903c12c13ee5974a379dc4b3602f48dbb4ee6548feb63572a6797","first_seen":"2026-09-05T06:17:05.720731Z","last_seen":"2026-09-05T06:17:05.720731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":403,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/font-awesome.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.594Z","timestamp":1788588992594,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/font-awesome.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:01 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f54-5c74\"\r\nExpires: Sat, 05 Sep 2026 18:10:01 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23668,"size_decoded":6324,"mime_type":"text/css","magic":"ASCII text, with very long lines (23503)","md5":"de3e39e7fb5f412f6863974f647c5666","sha1":"2f102afbf7967b7ff8c645d390c4dc93e2d9d6e0","sha256":"35d3b6a511188e53aa07b372c7fa9db79d271bbe9de763bdfd406503ae8fd9ee","sha512":"17e56f980095b910fcadb0b9428cff6141f8a408e7aa7ab9f0a26a1a7573bc7c0eed64fc4c4cafa75d3298d21eeb590eabca8cd87fdd1e9b6485afc134c4b408","ssdeep":"192:nq/iZX8W+ab2edrKeTUKuErArKlcZJVrJ3ee+cR6waYm215bvfhf5DrkHUasT:Xs5yWeTUKb+KlkJ5de2UYmyTfhYUasT","tlshash":"9eb240f8e54d01d66731c48bff85b36862baf73dd5800d99f00f290c29d22a512c9bba","first_seen":"2023-05-23T01:07:30Z","last_seen":"2026-09-05T06:17:05.722903Z","times_seen":163,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/normalize.min.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.638Z","timestamp":1788588992638,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/normalize.min.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 15 Mar 2019 07:08:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5c8b4f56-9f3\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2547,"size_decoded":1485,"mime_type":"text/css","magic":"ASCII text, with very long lines (2215)","md5":"f7c38d0db574b57c1c0d10f0c4150c93","sha1":"0801943645bd540d1cd23da1fbb2cf3a0d57aa7a","sha256":"bc960e44c89cb571d547cba34409fb27b67ba529ddf6be0ba44fbfcebf384961","sha512":"5e0a292515ed5ff89f7c671355d1a988395456d1673a806d72a16e40e0e4c13314e2023e0b09f451cdb0b4053c0921a0bdf4b2e10490400541fa6a6952a37954","ssdeep":"","tlshash":"de514473a7807954e3378d323bd677d87a008532c051a2abe440d9b8cad977757f2b49","first_seen":"2025-09-28T11:18:26.21743Z","last_seen":"2026-09-05T06:17:05.724926Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1132,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.ddqyy.top/skin/css/main.css","fqdn":"www.ddqyy.top","domain":"ddqyy.top","tld":"top"},"ip":{"addr":"211.149.166.225","port":80,"asn":38283,"as":"CHINANET SiChuan Telecom Internet Data Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.ddqyy.top/","date":"2026-09-05T06:16:32.642Z","timestamp":1788588992642,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/main.css HTTP/1.1\r\nHost: www.ddqyy.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.ddqyy.top/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 05 Sep 2026 06:10:02 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 31 Jul 2026 00:57:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a6bf2f3-10643\"\r\nExpires: Sat, 05 Sep 2026 18:10:02 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67139,"size_decoded":14321,"mime_type":"text/css","magic":"ASCII text, with very long lines (480)","md5":"9d1e902977818e0ce4a5203c3d0028fb","sha1":"c9cece5c0967c4ec865be7abac3eed950bd69f8d","sha256":"b26a2893eb7c59cd7612bfa71abaf8ac2d0559657c218943244f67fbd70898f5","sha512":"603ed84e30f02725d12fb26e2e72518b49fa570ce5fc9742e314484d57a182becd3164f41db5adb62793958ac38c3c688b90815b7d14b3e1b9906a6523f16934","ssdeep":"1536:1aHiCGpXkW8Tcnz0u67iOOaaywfmFe+NDfROzsADy:5CGp5Qu+iOOd8FfwYADy","tlshash":"3b636117ba112c44f116d4acfb896fe9ab1e54239e0f5eae7099b42c83cd0d843b7749","first_seen":"2026-09-05T06:17:05.726705Z","last_seen":"2026-09-05T06:17:05.726705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":419,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.ddqyy.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}