{"report_id":"9eb44244-1f79-457e-9b28-99e40685c5d9","version":0,"status":"done","tags":[],"date":"2026-08-17T01:38:18Z","url":{"schema":"http","addr":"hg88021.com","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"hg88021.com/","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"title":"皇冠·体育 (HG)官方网站_CROWNSPORTS","dom":{"size":24018,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16724)","md5":"cd219f9cfe523699efaa14c9f8029e7f","sha1":"b8a750f95a1aebdeb3f366bdbe3e48e538cccbd0","sha256":"13b5dc777622a13772a377c5fb78122f59c96c7360ea63b933a7085109f71045","sha512":"3383e6f86a33748e9e52a7c73a5a33b4e3aa76b20cfb35c6a2559a9ce8e94c26fee7b0c3a74ee22562cb3178d52e5f5d3234bdd78e062c7984f5be52908bb4a9","ssdeep":"384:o7p7wLn7O8A1MhCrl5pqaBvrCYfnvg2C7SdxSYO:zLa8A1Mhy4a5ryMdxSYO","tlshash":"8db2b7333661793f42ab8ef9b554fb4e71e7810eca774a01b7f88bc44bc6c828846159","dom_hash":"domhash31f91db3634549574b889f77a4b8a7f3","first_seen":"2026-08-17T01:38:25.674513Z","last_seen":"2026-08-17T01:38:25.674513Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hg88021.com","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T01:38:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hg88021.com","ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":81,"request_count":27,"received_data":2151010,"sent_data":13465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"156.244.169.211","ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":294811,"sent_data":5017,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-08-11T02:03:33.269762Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.51.la","ip":{"addr":"125.74.108.42","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-08-11T17:34:05.943368Z","alert_count":0,"request_count":1,"received_data":36505,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hg88021.com/e/dongpo/tz/tj.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","size":808,"data":"","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-08-17T01:38:25.683205Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e534a5cbd2df3aaed4e2bb405780d2a7","sha1":"bd4ac483c7629ef832aaa724291e5f3c97013e14","sha256":"4df2c5608d78458b37f68c0612223902a6b6ea8d31ff8124ed0eff7589fc03be","sha512":"4a5e434560cf6e8e9c071dd0cc5e8c2442dafdfbcba638c0c7e90bdc5a74deee42bbd2a2a1b7452addb1a807443c6c4db4eb30e1cb2629ebe39320e9c7d36662","ssdeep":"","tlshash":"d4f0dcae9c51e178abc338ac9bafda88c16e1026110ecc03a9d9c5ce3c38fc8042134c","size":492,"data":"","first_seen":"2025-05-26T01:34:30.601443Z","last_seen":"2026-08-17T01:38:25.707356Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/js/link.js","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6db1674f82a27cc00248d6e9dea55611","sha1":"36bfd3bd55b741b257f091480bb07f82a26791a3","sha256":"0ece0f9bc8449cf4def9b243d291b7d7785a0cab33b2b90b8136d1c11660805d","sha512":"fe267c7f554b320aa550e2721bb3a84fb2541cdec3af7f12c4f5dad8f6fb1be67a9103819b5a13542042125c19eb3a5e4221013c5863a5209c73e835c8af3530","ssdeep":"","tlshash":"65318e5cead038220d270967695b2d14b653400bbd4aed43f69d4ac0dfb172e4b7a9e4","size":1743,"data":"","first_seen":"2026-08-16T06:18:22.98184Z","last_seen":"2026-08-17T01:38:25.688885Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"125.74.108.42","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-17T03:01:57.877905Z","times_seen":99032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/e/dongpo/tz/tz.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd51774e8d302e07682e09384b53740","sha1":"a852f9f4dd23af5da2990398fa3c68e8c49ff3ab","sha256":"3bb758e6d57d175c9e965cda74d02359b8816fc8d64254213b4ad5085b8d98b8","sha512":"b10a9f2c24f49203d0a6e07415ad0eb597ec15a46ced2d2c47c868ffddf5fec36f383da050a2397641791fff604f798ee65e6a974f216126eeaafb8d49da5b00","ssdeep":"","tlshash":"23218c7fae231250e01691592bba676c3a3a001b6301cc307abcbe685f42f429447bd4","size":1160,"data":"","first_seen":"2026-08-10T04:17:50.869663Z","last_seen":"2026-08-17T01:38:25.698412Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-17T01:38:25.690413Z","times_seen":2897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T01:38:25.683685Z","times_seen":5771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/js/home.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-17T01:38:25.677719Z","times_seen":1440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hg88021.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:48.491Z","timestamp":1786930668491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 13 Dec 2024 00:50:06 GMT\r\netag: \"675b84be-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158220,"size_decoded":158494,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-08-17T03:10:14.828156Z","times_seen":33807,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":361,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:48.720Z","timestamp":1786930668720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 10 Aug 2026 02:34:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7938a3-2022\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8226,"size_decoded":2882,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"37e7d1f52c08e5cba53549061a088fc5","sha1":"28c3261f8d0f8046ea8bfbcc0ad0e27c80b4dd5f","sha256":"16fe2998b51bd69b9259cb4d1045e4053b99d36368c45efc805240deebc66f0b","sha512":"e64d59f26fc94e14d5b925894cfcdeace55b2bdc48a749ef9b1a7043df551479d55529bf533bc94d68d5f5f071d501c5cfef7fa3eb13fdde26bdcfeb5f3cc85e","ssdeep":"192:irnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sArt+:ljmX7Art+","tlshash":"d602761661d3115b292291a66fb3171b6664d407c20bc9a97fcc15cdef89ac9c8a738c","first_seen":"2026-03-01T01:18:02.551716Z","last_seen":"2026-08-17T01:38:25.676702Z","times_seen":593,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":182,"send":0,"wait":185,"receive":0,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:50.151Z","timestamp":1786930670151,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 428\r\nOrigin: https://hg88021.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T03:12:38.174733Z","times_seen":17928789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/js/home.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.801Z","timestamp":1786930667801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jul 2025 03:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68747e66-16aa\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5802,"size_decoded":2098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-08-17T01:38:25.677719Z","times_seen":1440,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments4-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.817Z","timestamp":1786930667817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments4-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 115364\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-1c2a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115364,"size_decoded":115638,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 789x606, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b00bebf224b7e117a9ab212e64eb1213","sha1":"ce11fba6aef3ab38a3b713916474db931395a82b","sha256":"8b4d1efe0a8c8597f5445643163d88515ae74bc3b6fbc05b4dce6715bfe8f3be","sha512":"dc100cbb8bd537f0e13bf85df691c05040ff7250edbbdaa76f8776592619dc3d3e871f01f5c36457fb946e308380104b952998783dab92cd608d91fb7d0442b8","ssdeep":"3072:XDV0d4S9oD85ZI4OICRKiQZiYC2O+WTwrgZWlDOHlgDRY7+8Ep:XDCd95TUWsL0SjgDeWp","tlshash":"27b312e9e5a102b940247a6b3d6eac37eb143708b36fc5f40c618f45c995ea3e04bdb1","first_seen":"2026-08-17T01:38:25.67822Z","last_seen":"2026-08-17T01:38:25.67822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":656,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments6-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.819Z","timestamp":1786930667819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments6-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39210\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-992a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39210,"size_decoded":39482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 669x446, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5fc3301d5771c29b088edb87b89f96bd","sha1":"1b65b495e8f6a85fdabb27ee615af607ec6a1935","sha256":"36fe2d3daeda9916dd0734c5e49c5ed65d7e05ffd6aa7d4f807108f474481e29","sha512":"785ab7fde4d0949cd62ab77f1dddb2738908ed9fa9a16966735befe52a7c3e3cf5fcc7aac3e573d22e46f98a7ff6d42b20053d329cd4bd0e864e5086d2407db3","ssdeep":"768:NdjR0pyowfVWMOpnJ+AaCbnaMjjhyqR7UU5WLKQ:Nd1nWMOpnJsCpVy99Lb","tlshash":"0a03029dedbdcdb50981079c17e5601eeae48fa47f70c87ba3c42f832a1e9a89d55012","first_seen":"2026-08-17T01:38:25.67919Z","last_seen":"2026-08-17T01:38:25.67919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":648,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/wnspc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.541Z","timestamp":1786930669541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/wnspc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-1eb7\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7863,"size_decoded":8238,"mime_type":"image/png","magic":"PNG image data, 172 x 60, 8-bit/color RGBA, non-interlaced","md5":"6e6f3e6c749737e6c347ec25d39b3eb1","sha1":"076c805bf394c7996a58202e333827837c8b1378","sha256":"391138ddf53bc321563b3d17fe0f37f5b40efba65fc661dbfa239a2b2184ec65","sha512":"b4621a8e30b49a48b1b13e9582c260b02d42ab2cc2509d59e56cf85028eec3dd165e255dff5c61e689ad8b4eaabe74852185efb2764da5c0ec1133a2ccb02a3d","ssdeep":"192:FQSFq7yL2y34yuuSzYUfBY2kCf9pDnA3+O07Zu86U9S0aN:zFjLX3u1YU5sCzA3hEu86sSLN","tlshash":"26f1ae6b1553fcb469dda7e92063af6082136f48b0077a12fb2b29748135fe5f44aa13","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-08-17T01:38:25.682693Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/e/dongpo/tz/tj.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.802Z","timestamp":1786930667802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\nlast-modified: Fri, 20 Feb 2026 16:17:53 GMT\r\netag: \"69988931-328\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1159,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-08-17T01:38:25.683205Z","times_seen":954,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.799Z","timestamp":1786930667799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jul 2025 15:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6865571e-22512\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140562,"size_decoded":39953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T01:38:25.683685Z","times_seen":5771,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments1-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.814Z","timestamp":1786930667814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments1-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144082\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-232d2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144082,"size_decoded":144356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 805x574, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"346d376314ecf9677146463c9fad4afa","sha1":"694ca27b2b4059d28402a27e07c88fdfbcba1db5","sha256":"c0768fe896184443600f810df5cd23fb31765446fdba130d3dc68a16784e7735","sha512":"f4b5c7b20f995d67fa3567e61a72ae22075a8c600a44a093e482ba6008b7fb09d911347fe666bd9c0f2a28799dc00855c1557d1d0b22742fd9f1b5fc057643e9","ssdeep":"3072:W4xHhzGIRm+EDSOvTU1trIMZUGHNGWIIJUAW45OibV+lsxFPBT:W4nNR7EZ4EGHNGJUyibss3PBT","tlshash":"39e32365038778a60da14dee617f2a3c6d31e12d516b3f44f0ee0431bdca099d628e6f","first_seen":"2026-08-17T01:38:25.684199Z","last_seen":"2026-08-17T01:38:25.684199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":865,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments2-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.815Z","timestamp":1786930667815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments2-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87216\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-154b0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87216,"size_decoded":87489,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 582x388, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46b453e96c3491cb64a4acc6758e0e01","sha1":"5d5784dfc3af83b3a4d5e0907bd7a7ae16edb32a","sha256":"20dc37a3621c52a3c9d10ead076db72920417a86b4dbdb38e4f6ee7f9788e3ee","sha512":"45557756df7fc997abbe3f7af041a49065a2c871923a26a2af62dff847759a8d82637af0fd8e23c5dbe80ccfe63b8e3b6eee9a75396152d93f967586eb0c6b5c","ssdeep":"1536:wBC7OlfVtFZXz42wdWF31f929+KoEqExYLSCFPNcP9buWZth2eVceWPN4A:wBlttFZj4zc31QxYuCpuP9buo2eGXX","tlshash":"b18312908f53882b70b104b1a93801dbe2b296046d7d943b6bf7ff6917876f68d2524d","first_seen":"2026-08-17T01:38:25.685118Z","last_seen":"2026-08-17T01:38:25.685118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":656,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments5-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.818Z","timestamp":1786930667818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments5-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93364\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-16cb4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93364,"size_decoded":93637,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 599x398, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"08fa14183004f8349bfa6c5c5f05939e","sha1":"a5f0668b63d005454eec7c298a4c948278580280","sha256":"3b7d73d8472d7598cbf5ce3beafd3345b3c3e70f4213e7848b7ecd5283e7626e","sha512":"a53ffef38898c34e6d396be4cdb2bf2f8db45a9c8ba4dbfb84f6152230f7081d31d21f86fb594b3bd26789f60029280341c6a644bbbb92bc37cf87bf29486393","ssdeep":"1536:0JQIz56gaICLMCHvfiFhn1BCPWnstIbzY6KLa9wCsnnmFWmXTcYrqkRNTtRKfDc:0uYEgaffyvn1BtiIbzL7CCV1oYrB9tgQ","tlshash":"5a93021b0d1cb77a221774a34394dd5047a8bdfc92e9a721465db37f872dac32ac660c","first_seen":"2026-08-17T01:38:25.686389Z","last_seen":"2026-08-17T01:38:25.686389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":657,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/footer-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:48.444Z","timestamp":1786930668444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/footer-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117890\r\nlast-modified: Wed, 15 Apr 2026 02:19:34 GMT\r\netag: \"69def5b6-1cc82\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117890,"size_decoded":118164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 817x544, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"271b05ec015c3886db9e86033c25edf0","sha1":"2448f9a6c77f96f794358aeeeea38ba2119475a7","sha256":"a6d8b329332a2947acf1c66471e96a8980ab29555d4dde610a29b57d91c10e0b","sha512":"5c3ce4b180bdde354ba6b5a25e6e801f00507e0bf711f26ee758f5c0b46a1a9e9779f56add32fef64c55367404f61bdeaf32b537dd5ec9a8ed2860c6b5346b9b","ssdeep":"1536:chwg3uoxjoxE4/i+9Rx5h4z10CiW7W6kwxhKoJs2dve0qLXbJSs5CegX7Mbq4q2E:ZiMRU1PayKoRdGLLJSsEoW4PO5jf7JF","tlshash":"5ab31280d7ab91fdcb0c3e4e95fe5422393b08405c887269ddc3b329aa7e0477e2565d","first_seen":"2026-08-17T01:38:25.687444Z","last_seen":"2026-08-17T01:38:25.687444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"125.74.108.42","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:48.723Z","timestamp":1786930668723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: openresty\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvia: CHN-GSlanzhou-CT20-CACHE20[53],CHN-GSlanzhou-CT20-CACHE20[ovl,50],CHN-JSwuxi-GLOBAL2-CACHE70[ovl,22]\r\nx-ccdn-req-id-46b1: 3879505a59f8e6637fd260b301faf6db\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36115,"size_decoded":36505,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)","md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-17T03:01:57.877905Z","times_seen":99032,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":3,"connect":258,"send":0,"wait":313,"receive":0,"ssl":474},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/js/link.js","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.535Z","timestamp":1786930669535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/js/link.js HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Aug 2026 04:10:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a813849-6cf\"\r\nexpires: Mon, 17 Aug 2026 13:37:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1743,"size_decoded":1003,"mime_type":"application/javascript","magic":"ASCII text","md5":"6db1674f82a27cc00248d6e9dea55611","sha1":"36bfd3bd55b741b257f091480bb07f82a26791a3","sha256":"0ece0f9bc8449cf4def9b243d291b7d7785a0cab33b2b90b8136d1c11660805d","sha512":"fe267c7f554b320aa550e2721bb3a84fb2541cdec3af7f12c4f5dad8f6fb1be67a9103819b5a13542042125c19eb3a5e4221013c5863a5209c73e835c8af3530","ssdeep":"","tlshash":"65318e5cead038220d270967695b2d14b653400bbd4aed43f69d4ac0dfb172e4b7a9e4","first_seen":"2026-08-16T06:18:22.98184Z","last_seen":"2026-08-17T01:38:25.688885Z","times_seen":10,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/xpjpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.540Z","timestamp":1786930669540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/xpjpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-5800\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22528,"size_decoded":22646,"mime_type":"image/png","magic":"PNG image data, 183 x 55, 8-bit/color RGBA, non-interlaced","md5":"c53d923594566be7e0e41e8d720c0ac0","sha1":"e16a4b701d10291bbff90178e8b0d5f576e00821","sha256":"021994557d1d9642fdc16a0d8f6e471bec81bea7f366de6ef631f536c165418b","sha512":"554f7d6d44d26905610a65e21bd157ec30fef501c356e97787deca22f9089216f59e284f0effab7b18da89134af594d4ffd5eed889b1b5a4d5a5412456b9832e","ssdeep":"384:QfchEzlZmrXTjUDkJe2tERBxq2ceTdr1lFJ3d2Oo+UQSYJshjRHXvcQ:QfchEzrmrXTjUhP42cKpFJ3lo+UHYa//","tlshash":"fba2e0f1f36ff1b54a924d554cf8e2b080978942e088ee6135cb204acade8d31d993e7","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-08-17T01:38:25.689364Z","times_seen":1190,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/css/module.css","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.790Z","timestamp":1786930667790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 12:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688221f2-28112\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164114,"size_decoded":32362,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-08-17T01:38:25.68994Z","times_seen":1414,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.798Z","timestamp":1786930667798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Jul 2025 15:41:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686401bc-13bb5\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80821,"size_decoded":24420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-08-17T01:38:25.690413Z","times_seen":2897,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/departments3-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.816Z","timestamp":1786930667816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/departments3-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73144\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-11db8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73144,"size_decoded":73417,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 622x414, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee572358985a2638fadf55679f86ef09","sha1":"645f270ee7ba7212f6cc6759764d1298cea8296e","sha256":"4c87bfefbf4ba70caa3f4a38e0d56bc96f205b78d5d6ef4d6d860d47e5c45ce9","sha512":"2e260948e023f37cf9f23a8ae256d60f33616bdb7c67c69052845fc0ae38f79456c206b645804a60ba9d8af55160533a899f6f866f9689734692560dde156ca0","ssdeep":"1536:bx8xyIqGLUvK0+dP9Vjzgh5/8xhkIGeQl71Oo4TRAn97G0coL:bxqyIEr+dP9VjcvsGeE1O/TRk7TL","tlshash":"c5631295ef00f710875bd0a0f223eeb5c1662191165d3a699e7ac27f013ab3592f60df","first_seen":"2026-08-17T01:38:25.69092Z","last_seen":"2026-08-17T01:38:25.69092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":656,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/judge3-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.822Z","timestamp":1786930667822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/judge3-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88144\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-15850\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88144,"size_decoded":88417,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 562x374, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f54c5690aabfa9acdc3f40ac19d45de","sha1":"67747207775d5e230541ec0294fc1bc7b180a283","sha256":"8450238ba8834620810634a5b1ba9d4daeefed9d8a9f6550021c5c75c4674edc","sha512":"8c1f325708168d136487eb0a6033e77b8c6055b801165bcc727361ad468ce8ce5f64a591efbb81cf0ca0938588a4d80a2c996b29573b713bc28be4a9751d091c","ssdeep":"1536:3A9ZAfw15IEh6UciPtlZzIKHtG+z8FmcYkO9yW7d1tZA+/mGLK45aXx/Sl69Vuaz:3A9e415B0U1VIWz0azCxKDajbimp","tlshash":"72831246cd660458fdbd54bd3ad8d973ad690cb2ecaef3ef1600b0ea5cc31e56496840","first_seen":"2026-08-17T01:38:25.691993Z","last_seen":"2026-08-17T01:38:25.691993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":657,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/judge5-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.823Z","timestamp":1786930667823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/judge5-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42900\r\nlast-modified: Wed, 15 Apr 2026 02:19:34 GMT\r\netag: \"69def5b6-a794\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42900,"size_decoded":43172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 661x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"334fa8f930425a2759cc74cdb1601a9c","sha1":"8b15bf570d92f1e082c25c523d71a1f55b1434cd","sha256":"5af195775da0a7f13c67153d58f17fb8a7e065eafc5da841c4e0c913f071ba2b","sha512":"f2cae291ffcd881db4afdc0cbc2ee587b3d35ffd461e742d7f5454787df245c2bbdd1dd75c505010260a913886afe494a1002b898c45a078b296c7b8c3ec3e20","ssdeep":"768:gt8p8xobGGktB1eOUhXSOVRSHJnRMPkahIcscquB/EoXNHE0TDs4xmoB5xukcopF:z8xN/tB1TUpVRWnokahPscDPJmoPQil/","tlshash":"571302358aae8fdadcc0fcf989c2aa1546ce459f615056f8448ba5c848f370de2c43de","first_seen":"2026-08-17T01:38:25.692968Z","last_seen":"2026-08-17T01:38:25.692968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":654,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/jinshapc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.538Z","timestamp":1786930669538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/jinshapc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-a334\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41780,"size_decoded":42160,"mime_type":"image/png","magic":"PNG image data, 295 x 113, 8-bit/color RGBA, non-interlaced","md5":"1d2140363e0fda69f41537010f37ac74","sha1":"9f3791b6ade0a7966dee0253cb698564490e9440","sha256":"65ff8549228320f54f3d93e45194314c43c7cea541241876a57633bb5ac94f92","sha512":"75dd491fe42a57dee94c06e5e389323f0b32a584f3d0223845ea8f945ac9cff401e65cc381f4e8973dd78c14655abfff000186a770df78acddff35e6bb69fa86","ssdeep":"768:fUD/+JUtuV8Sp+uA5mBhYhXXy7I1VzKT26hq34ZhMNg1de0nGtXIIq5y7RYLIXK9:j2SYd1Xy7wVG66BvMNg60KXrsLB","tlshash":"3113f1a116d7074d278849fcda334deec406ab285d19b93ec5f68f34e3846c4d083a66","first_seen":"2025-01-31T12:39:53.036928Z","last_seen":"2026-08-17T01:38:25.694349Z","times_seen":1050,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/dfpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.543Z","timestamp":1786930669543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/dfpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 11:38:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d8daa-1c49\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7241,"size_decoded":7616,"mime_type":"image/png","magic":"PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced","md5":"9ca63936da71d994267413c9b4d62583","sha1":"0083b92ce28904d8c01cca591a852d218c944d3e","sha256":"909c9c1f9b2ee3b6ebe305b395b454cb597ae2b4ad8ec0db3a57c2e678bb685a","sha512":"2c01f6e39b4f8c4ff7d8c2d20640c9d80b50ebb49351d32c4e0263b11abbb721b6af3c4d27c308f6e26d4f9e0c5f08045c0d235b3ef1a587eaa1df578c7c333b","ssdeep":"192:FxLpy98iKPdw9eYyJIoxrBG3GFQVnpq1fw5qDQ/7os:F1pyNIq9e1Zrg3GFQVnp2YsQ/j","tlshash":"78e18e3b8e8c2754c1551385a136fab4d8791ef331f4923e9a257c22dd52ab2c921386","first_seen":"2026-03-01T01:18:02.55958Z","last_seen":"2026-08-17T01:38:25.694877Z","times_seen":698,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/1552215839168.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.544Z","timestamp":1786930669544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/1552215839168.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2a6b0\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173744,"size_decoded":174162,"mime_type":"image/png","magic":"PNG image data, 488 x 147, 8-bit/color RGBA, non-interlaced","md5":"ce2e5b88612ff5d0c083357995805cb1","sha1":"ee211057d855fb16fcbbc4dd280c54d0e8be9445","sha256":"8d2484ecd64a9270ab446bebd54998c84015ccac62e322332ff027218cc11c54","sha512":"5c3a7cc91ed1cc8f9064538fd154dd31addf4705eea3767bd444c06cc64dfedc9bdccee584936bd2b6a4f142820d0bdd74213497247a59759e89d79fa5bfd896","ssdeep":"3072:7jOt+RYVDFMiydCbjFViIj2qBEn0uzBdtt/jU4SyaguPpoQE3TqtGMFR++gcKiYF:fOARYVFMiyyhViycrTLw4vagkpoQE3T/","tlshash":"c204124c9c4413f186c9f265e2068884e57fc915427c342b37c9e3fb4da6a4927baf32","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-08-17T01:38:25.695529Z","times_seen":996,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/judge2-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.821Z","timestamp":1786930667821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/judge2-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97228\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-17bcc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97228,"size_decoded":97501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 759x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94b437895ff19d619f3bcac43bbb0c06","sha1":"471e6db590ffa41f0f822507888e3505f955dcef","sha256":"679e00a365f59478dd37699594ce8daff17c0f28016376258b87e7042c2223a8","sha512":"76cd108b7135ec6917a4a3703662461000484cb6ccd55480584d335708fbac921005781bb4eca3b302d1364b3b7568c6dbf0fb3e994b6d3e1e86e38e0d884f1e","ssdeep":"1536:BsfPBHSwCGevQ3nsx/FausckEvSivu4PZ1WnIGGwhA33bZUNu:6PpevQ3n2WaSiNPZ1WIsun9Wu","tlshash":"279302baaf9d3137f41a2689cbe34093b0d1c23d1ddcc6a55b1fb2f42b70a1616d5216","first_seen":"2026-08-17T01:38:25.696047Z","last_seen":"2026-08-17T01:38:25.696047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":657,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T01:37:46.268Z","timestamp":1786930666268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23517,"size_decoded":7006,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17495), with no line terminators","md5":"d1816b373567e992882d8682611ab4c5","sha1":"e9dd8dccc7f2941296124c6a4df5211f00d87cb5","sha256":"8848194b3113bb7b6eebbf93bbab34c171dc1670960667e3a686f90dd825c29c","sha512":"0b50d8f0862f7ef539308ce58e0167edd5b7a0b605c1e7b68b4fd9d26cc3bee5ebfd134ea300f1094b0c464a8de1e41726a77b52b428a8dc0dc5f73fbc6248ba","ssdeep":"192:25BQ0YA5BQQWOF5BQPj8Z2MhSbrv9liYykBPHXaK/MqFDvrCpZoat3UHLL1RYBYI:27T7407ej1MhCrl5pqaBvrCYfnvc7Am","tlshash":"21a2a8327660797f42ab8ef9b554fb4f71e7810eca774a01a7f88bc44bc6c838846119","first_seen":"2026-08-17T01:38:25.697014Z","last_seen":"2026-08-17T01:38:25.697014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":0,"dns":353,"connect":216,"send":0,"wait":251,"receive":0,"ssl":436},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/fontawesome/css/all.min.css","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.793Z","timestamp":1786930667793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 14:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863ede4-1907e\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102526,"size_decoded":23140,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-08-17T01:38:25.697925Z","times_seen":14730,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/e/dongpo/tz/tz.js","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.796Z","timestamp":1786930667796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 02:41:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a793a54-488\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1160,"size_decoded":852,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cdd51774e8d302e07682e09384b53740","sha1":"a852f9f4dd23af5da2990398fa3c68e8c49ff3ab","sha256":"3bb758e6d57d175c9e965cda74d02359b8816fc8d64254213b4ad5085b8d98b8","sha512":"b10a9f2c24f49203d0a6e07415ad0eb597ec15a46ced2d2c47c868ffddf5fec36f383da050a2397641791fff604f798ee65e6a974f216126eeaafb8d49da5b00","ssdeep":"","tlshash":"23218c7fae231250e01691592bba676c3a3a001b6301cc307abcbe685f42f429447bd4","first_seen":"2026-08-10T04:17:50.869663Z","last_seen":"2026-08-17T01:38:25.698412Z","times_seen":19,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/logo/hg88021com/logo.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.808Z","timestamp":1786930667808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/logo/hg88021com/logo.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4654\r\nlast-modified: Wed, 15 Apr 2026 02:19:32 GMT\r\netag: \"69def5b4-122e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4654,"size_decoded":4925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2748d8378024bbdf6fc2e0198e7eb16b","sha1":"ac20c80678f796377b9a53b65874415ce10f6f6e","sha256":"03882ab1c2773a3f39d916809c7285372df13fa89a752da622311996e8553e72","sha512":"1375991dc73e89c2270c5b63d1587c55b06524aab11ebec365bd6e150da54e42c6d3a2306f52ab4eec6757f9a63595a894c72f9c43447f95d6bc8d4a70734c2c","ssdeep":"96:g32NCEWsmQNC9kLSK3HwD1TzHYjwVtrvBFANcfABLn6K0FCt:gGNZWsBUBKXeVtHDYV6K6","tlshash":"d9a18da8fc0f39588b712a1f3a082d08099672bb4b4992541e9f437f4a462390cdf0fd","first_seen":"2026-08-17T01:38:25.698978Z","last_seen":"2026-08-17T01:38:25.698978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/judge1-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.820Z","timestamp":1786930667820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/judge1-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74448\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-122d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74448,"size_decoded":74721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 794x529, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b32d1419e90a38d4689ff4d3b8a22fa0","sha1":"c8f84e57306bfcda98b6dd52977ef74fa9cb29f1","sha256":"b937478ce584e0377fbafc7913a70600d9d3b080c070979fde32816e1c777552","sha512":"f2dfbe9fc831d2884c4672c1b2e7ee0acb087c86cf979acac816cede86ceef311b530ac992419b2288066d941d7a69de9478ca0a9f765ad4fe70e0f17c1d077d","ssdeep":"1536:OfPrPHk/Ue0Q/8EquXChXLdx5bQN9QmhYTEZIHGsPsVYoajHh9ugAJS:ezPHk/zjlTyNtbQN9Q2ZIHGsUVYouB0w","tlshash":"587302978e17b878fb2bfe4dc2a45141bed263c4ee79d3218c4ec23319ab2101f5a594","first_seen":"2026-08-17T01:38:25.699916Z","last_seen":"2026-08-17T01:38:25.699916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":657,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.791Z","timestamp":1786930667791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 00:36:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686c681a-4691\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":5190,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-08-17T02:56:55.926758Z","times_seen":6402,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/hero-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.809Z","timestamp":1786930667809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/hero-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63018\r\nlast-modified: Wed, 15 Apr 2026 02:19:33 GMT\r\netag: \"69def5b5-f62a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63018,"size_decoded":63290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 797x531, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f3701a5d2f5e4d3e23eac0bff7550c8","sha1":"a43f9088bceda227e877f402b1541d8d63aab2eb","sha256":"41e5d47dc341e28060717866bf9f9abc11b2b15668c5fd7a2c756e6938a31f77","sha512":"209a46a8ad5dbed7d6033c60f868f60a67555a8ed6f8127fa1536d7d54ff5423875e65fd2161adf770a27c94e7ebb26ecc877fffc3fb7dd178652b87c227c2cc","ssdeep":"1536:uSuFAQEFhqYAwN2XkDxH2O9a+0c5Hx9vZcDB:uSuFAQEFhtNSkNng+X5LvZcDB","tlshash":"c05302d2bef0a3009346f19de5d8973822d61a7c828ddc066c569c1c9307dafdcad6a3","first_seen":"2026-08-17T01:38:25.70156Z","last_seen":"2026-08-17T01:38:25.70156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/about-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.813Z","timestamp":1786930667813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/about-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74704\r\nlast-modified: Wed, 15 Apr 2026 02:19:32 GMT\r\netag: \"69def5b4-123d0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74704,"size_decoded":74977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 745x496, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9d0af8a59cc40c3aae0aad9d4337c5a","sha1":"031d883e9910189ad76bc3df4ce17acfdfe57576","sha256":"af4803174a73addf627ae1dad1e3cfec2264b4b7d7b012044bbefe3ef810359a","sha512":"12999910d2c03884926dad42d9b62c6dd176d8e2443c6a3e2e0309309a193ecd7bdec870d15c102c4f80f0a32b3f7dd7d33546d416e2206803246fe20eb0fae6","ssdeep":"1536:vaUVImtViakx0JImpkajwzkE5o25W676Xc6lwIgTnihdiWxj:vas/7ZJa+AZ5W676smdgr0diWxj","tlshash":"6d73023b510f8fdd42610fe8580a111d21a671ebdd2be5e65add3eda309b471b32091e","first_seen":"2026-08-17T01:38:25.702428Z","last_seen":"2026-08-17T01:38:25.702428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/cover/hg88021com/judge4-8.webp","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.822Z","timestamp":1786930667822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/cover/hg88021com/judge4-8.webp HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83050\r\nlast-modified: Wed, 15 Apr 2026 02:19:34 GMT\r\netag: \"69def5b6-1446a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83050,"size_decoded":83323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 687x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"014b2910474eb281adfca39db32ca6a4","sha1":"6a62174aa8e911ab03995d83ef40a46fb70afc49","sha256":"5897d07a6a6c848148c65cbe586e0dec003c37c2d2bfb885b1f81cba7a8a15e6","sha512":"9e93d939a4ca34b5b2e35e66994a15c456492e2e1ab081e29e213b20b0862f41c1046473871e3eac7ee5be0be69db5adb9bad43a0c434e60042b1f3c234040e1","ssdeep":"1536:fNoAUjJMmThFLlZaZ7jQvllEHQBSEDteyzQF/RYLNQvpB43fez:fmXh9/ujQjEH0fiJ9vpB436","tlshash":"758302be895af9db08a48fda605a92bf853001331881c7285f67ed57db5836f732126c","first_seen":"2026-08-17T01:38:25.703441Z","last_seen":"2026-08-17T01:38:25.703441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":864,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/365pc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.539Z","timestamp":1786930669539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/365pc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2255\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8789,"size_decoded":9164,"mime_type":"image/png","magic":"PNG image data, 189 x 44, 8-bit/color RGBA, non-interlaced","md5":"e0c9d379cd4926e815abd7d25c32f5e4","sha1":"e9a1fb55262d96495f14da278c7242cc3fda956b","sha256":"7b50586f667edbeb0c3d573a44d40742354c385a2d7ae1971aa4b0173c11173d","sha512":"519aaeff0baab73e269e86413df78c8563728cb4b1f17e448877c4853a726df366f201b9e869078a4fa460517530a84b5ae9da4290511aeb4d0b93aecb9ac99c","ssdeep":"192:6ZTS99EegUNgEBTJ35PgUUxiKlqSvxV5mG5pqghmCoTHV0:2YzgogEr35Y7cK1YGmAMT+","tlshash":"1e02a0bc5a62079b3d1aa9f8172c54f1fdd070eb411f7c99947d201b0c68a1c83af4a3","first_seen":"2025-01-31T12:39:53.02929Z","last_seen":"2026-08-17T01:38:25.704439Z","times_seen":1051,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:47.760Z","timestamp":1786930667760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 14:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6863ede4-38a52\"\r\nexpires: Mon, 17 Aug 2026 13:37:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232018,"size_decoded":32163,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-08-17T01:38:25.704922Z","times_seen":2905,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg88021.com/skin/ico/favicon8.ico","fqdn":"hg88021.com","domain":"hg88021.com","tld":"com"},"ip":{"addr":"156.227.101.197","port":443,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg88021.com/","date":"2026-08-17T01:37:49.386Z","timestamp":1786930669386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hg0009c.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 21:25:09 GMT","end":"Wed, 11 Nov 2026 21:25:08 GMT"},"fingerprint":{"sha1":"09:FD:47:0A:B2:3F:E2:73:A5:85:88:0E:A9:2D:75:45:8F:38:DA:27","sha256":"18:1A:38:43:AF:58:E9:3B:95:F8:21:C6:2D:3B:13:AD:8B:AB:BC:26:C6:92:05:B6:FC:59:DC:AE:75:57:E4:03"}}},"request":{"raw":"GET /skin/ico/favicon8.ico HTTP/1.1\r\nHost: hg88021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg88021.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Tue, 08 Jul 2025 19:42:24 GMT\r\netag: \"686d74a0-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":17232,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"b6720ddd8f341a304e36b59f8b2f48ee","sha1":"a2bee7873171528050d3a489030335aa64a5a56f","sha256":"9bb657f405d3ff8e8d8a7ac195068d07ca6507cf94847ad1594abab7ed5f28b0","sha512":"6ed50a850d1272738ddd1517991da63ab58bafa945b7890f572853c48ad8b1d2be109c7194afdeeae09aec180edb09d064478bb83f1cc60bd14e740d8ef8c7f3","ssdeep":"384:WFkKmHhlRohsazacKrCHsHLykkAifw2JsMVK80d7u:WFkKmHhrohsQacKWMrpkAew2JJVK8O7u","tlshash":"29723d2d0d889414dc127ef7fbd197260a3a6c10215c14939ca4ff0bfbaadfba666c51","first_seen":"2026-04-15T09:58:19.160466Z","last_seen":"2026-08-17T01:38:25.705443Z","times_seen":12,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"hg88021.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.244.169.211:44141/static/picture/tycpc.png","fqdn":"156.244.169.211","domain":"156.244.169.211","tld":""},"ip":{"addr":"156.244.169.211","port":44141,"asn":35916,"as":"MULTA-ASN1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.244.169.211:44141/","date":"2026-08-17T01:37:49.542Z","timestamp":1786930669542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:15:57 GMT","end":"Fri, 21 Aug 2026 20:15:56 GMT"},"fingerprint":{"sha1":"90:1A:05:5B:0B:FC:C9:07:AE:7E:14:04:9C:CB:99:50:3D:58:F2:24","sha256":"83:13:28:D3:16:27:24:E3:86:58:F4:04:4B:77:1D:0C:31:FA:C7:C0:60:ED:F1:15:6D:95:66:76:EA:5C:29:9C"}}},"request":{"raw":"GET /static/picture/tycpc.png HTTP/1.1\r\nHost: 156.244.169.211:44141\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.244.169.211:44141/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 17 Aug 2026 01:37:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-4d7b\"\r\nexpires: Wed, 16 Sep 2026 01:37:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19835,"size_decoded":20210,"mime_type":"image/png","magic":"PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced","md5":"9cccfc8ca4e4f50e4155a906a42666cb","sha1":"6687ef39ed3ba532124b8155234e819655ac0827","sha256":"38fa753bd6894fd8b0fdd94ba7e7bd9da32cb1e58017c44ce0147afba97b4841","sha512":"4e5e74b92841a16efc4cad516894bdaa1eca4ccdca290bcb36bbaa68cbe2011a6d12005f5bc2946532bbddc4e73161589ab3a296a734b78ad12aaa540bed9cca","ssdeep":"384:nC4JlgpsDv49JmGFnsvbCU5jAEVzJ0smbzRgZGme584WLMM0tq5PHcMV:Ccw9J9FybCUTzJ0smbZhwPH5","tlshash":"ba92e1cc99b518a51940f1dc2f338a48cfe9112c29e58776b1d377a2d94ae6f307c60b","first_seen":"2025-02-07T02:11:03.006958Z","last_seen":"2026-08-17T01:38:25.706718Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}