{"report_id":"a6236e6c-4d49-454c-a35c-55f36571c8f1","version":0,"status":"done","tags":[],"date":"2026-06-09T14:29:27Z","url":{"schema":"http","addr":"wzjsxx.com","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"title":"imtoken钱包下载-imtoken官网入口-imtoken官方最新版下载|Web3.0多链数字货币钱包 -","dom":{"size":60819,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909)","md5":"6807bc7716781f84dfb9b7fe6e60deba","sha1":"b3f4754c273f3a46658bcd35f5839f0727c53b9b","sha256":"7c512d786bbb5846b49b37ca4395762044431744bc705f42b7de21adb031a594","sha512":"eb3e2a2ba9b705bdbb6a23d20d1514023ddea1099b1bc9ee5bafbaf12b040310d22e901234eecab194e8d9cf6a3d584580a46c8f4e9905e3842591f8ec745b2c","ssdeep":"768:LhIIK4ydM9fw34lg5Ko4kfmeaBscDllEyGfz510NK1t:tIIK/dmIlkZCs5JlvGzD0w1t","tlshash":"e7536522ea856e638b015fc5437a064cf1ca9579ce7f67c37abe13c46e49e1e520342e","dom_hash":"domhashaceba1ebe19064760936c4c4458080aa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wzjsxx.com","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T14:29:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wzjsxx.com","ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2004-05-19","domain_rank":0,"first_seen":"2026-06-05T04:19:19.330915Z","last_seen":"2026-06-05T04:19:19.330915Z","alert_count":54,"request_count":27,"received_data":1015423,"sent_data":13972,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-05-07","domain_rank":0,"first_seen":"2026-05-11T02:15:44.533328Z","last_seen":"2026-05-31T13:41:51.319344Z","alert_count":1,"request_count":1,"received_data":22262,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-06-05T02:29:15.968348Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":528,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3b9738ba8a81b22d61cdc9cff73c5c1","sha1":"2257d1d65c7f38da1d9c6a2ac6bc27318ec590e1","sha256":"41a351ce7b4b6d9770456cb41b0b58674747a2c08cd4e94f1bb37aa9b53b5e30","sha512":"cc2ba9ce67e850b86f314d7a2cd6b55f5b0223996beadce1c30b32c92c359e735ad334c5b719acfb31834e81678ee42fefe2479e92d698429c1976023984844d","ssdeep":"","tlshash":"38c0128570400af09a8b46fb073512466ca1e49268174452c84545503924e03c77fb65","size":167,"data":"","first_seen":"2024-08-20T14:44:18.981161Z","last_seen":"2026-07-04T11:50:33.793058Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/custom.js?v=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5fc4ba77e23cb39f5400e63a84486d","sha1":"e16ee53fcc5dd1d23863c45a63b4d28108ff1f4d","sha256":"93d133db4163b9e86d5d79b7036dafb2a9ba7615e370c1a45507e0360578ad84","sha512":"9bb332ca3c23f051164139d3482217c673e1df95943e88cab88d32c10e902fe42132237005b22b2f66e862ca493f283aae981d8aff3d5d12db3e416543225482","ssdeep":"768:eXufEc5HZgCWOUTZ5JDi/wlND5ZqVlVo0CYZvst:eefeOEYKZqVXoL","tlshash":"d4d29598b755d22b47de2d57947ea798223ac533c0c5f053b3acf98d0da4a0ac19e9cc","size":30678,"data":"","first_seen":"2025-11-06T05:42:36.93465Z","last_seen":"2026-07-01T23:52:18.677202Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b5855d3a0f39ebf70bf860c8f6950eb","sha1":"7b9450868a0bce892505c2dbfe1af5411b37a062","sha256":"59830031abb3f44fa893a5521122e6d4959b9ea87ca8c54a55332660c2c116f2","sha512":"17ba73fbf41138c274c839c35d7bbc3348bafcfc9d4b57e2c2d9cdb2cba3d38d25a01cde3ffa977c82450528855907a56ea48502898dece89f60946bb0419c72","ssdeep":"","tlshash":"e5e07d9d74a57f4305b73260287f5067520b7157d821de00a32892425e3d728d027500","size":312,"data":"","first_seen":"2025-10-13T04:05:07.237419Z","last_seen":"2026-07-04T11:50:33.791928Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/jquery.lazy.js","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b3c64167a0c713159b17868570b9e71","sha1":"65487863f1f1b1aad51930fa980864c8d23054ee","sha256":"583d7c505d84b6bbc1f843e992093624699e52ffddfb28d58629aa66025cd846","sha512":"98c46b3aa9ed645da04ac6fc37f08723e3dd2b4bbca37e9da5aa9888b8e0e80425e75fdf6f0d38421cde8a14a15d0619a321774bbbb942535ebcc8f160b54b6f","ssdeep":"","tlshash":"2361b0493e06a13cb09ea67fc61b0309961ac51ba2b5e871a83584707cfced3a3135cb","size":3277,"data":"","first_seen":"2025-10-13T04:05:07.24502Z","last_seen":"2026-07-01T23:52:18.703199Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/jquery.min-3.6.1.js?v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-07-18T08:26:25.585866Z","times_seen":20999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_system/script/c_html_js_add.php?hash=\u0026v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"daa05fdcf4205fec8d21ca5a58180462","sha1":"7a43f3f84ffa8f4fcf5b8549b8fcb512db77dc00","sha256":"9dfdd2cd0b07d8ec3e5b2114155156dd0aa0b028980859fadf70268e11a40c6c","sha512":"7839ed9f4c042e02e97a3bb71757d94f080530a87060c09d1b4a63783ce3bfc26dfd4121c7ba7ae466de45af11856c21ec44bd6bcac9a94d91cc271b68744649","ssdeep":"96:6abV06qZuiMRd1BhXJnbZ2THKrOUiMMKDg8E:6Uvf1BhXJnNAHKiMNDLE","tlshash":"7691b6499e5a11a6243763f7c8af1604fea2166b4004cc26fe7c54682f71f849163fbe","size":4503,"data":"","first_seen":"2026-06-05T04:19:24.467786Z","last_seen":"2026-06-09T14:29:30.398845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e916beb0ea8b7ecc95dd5c21de83f6d7","sha1":"58e5b47915b68bc02a7d3afc52a5c3e3a6a32d8f","sha256":"9d5f57563d0cc9ead307921d1768eac48036dd441fc7755dafe822239870cbfa","sha512":"cfba848aae41d710d9b95f147b15ca8dafbac6e158e6de338869721c225e04dec74d00db3f109c3c535d25a7be8e2e9cdbd85f22598e455de0d5a3e7dd713a54","ssdeep":"","tlshash":"1151db4ff144a7f320ff06a8b2beb27471169d16c710d192f92954f2490af44ab62b7e","size":2520,"data":"","first_seen":"2025-11-06T05:42:36.968468Z","last_seen":"2026-07-01T23:52:18.706919Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/wow.min.js?t=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ec00b9a3e193e8fb1c32ba408376ae0","sha1":"9159ac99dcb85e5e3c13cb219ee17d7225aab90f","sha256":"2781b107078099bb9e3a6839f65c446f52f4ddefb6c9c6e713545679b217359c","sha512":"39eaedd0c5c25490e58abc5d8469ee7fd01b45d46259d0222d5b3a61e4b098cc391414ff14d6e8f303bff35aa30d678cfdf465dcb4d8b86ccaf751f44421fd6a","ssdeep":"192:Ep+VAMxYMNM8kYR2Xo5wfJZ2BTJ3Ij+fyJqCdVSV8/ACgH:W+CM6MNMTlKwhiFTaqC77M","tlshash":"d33282c0765930318b9b66b7931f4205773a25af506c049cfaac9de96a70e15a32bf34","size":11566,"data":"","first_seen":"2025-06-02T19:38:43.511707Z","last_seen":"2026-07-01T23:52:18.680608Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-07-18T08:26:16.768537Z","times_seen":48295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-07-18T08:26:16.768537Z","times_seen":48295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc/im/a9xp1g.js","fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","domain":"mmxihzuxbbdgqvsyq5512d.cc","tld":"cc"},"ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5ca6ca7acc25871421a84517c9a94a5","sha1":"38ce6a4e070c6661cd1ba15761c290a575155eca","sha256":"dbf0c1223c56a37dbaa73b22b9cfb51e98fde9893f4a23eb4d2ef1dfb4682826","sha512":"6a721da2158eaf03efc35b81f4e642a0be24543d20669f04e3f84b8cda86c1e038b5277d3f27b60b26e9671e69ff8775f7c9bd4338bc76270eac85228ee7bc74","ssdeep":"384:WTAFUdUU+dZkLoplBGm6BDN9BO7NTdbzHXa6gQMkR72CKWwgakAiSHb6Ql8XTYQg:WTAFUdUU+dZkLoplBGm6BDN9BO7NZ3a7","tlshash":"e6a2175963bfa80b4daf5901dc3a2e5c96f91cf20a4df81ece3b7284f624144c993765","size":21736,"data":"","first_seen":"2026-06-09T14:29:30.380386Z","last_seen":"2026-06-09T14:29:30.380386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_system/script/zblogphp.js?v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","size":7204,"data":"","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-07-18T07:45:42.810497Z","times_seen":2581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","size":61131,"data":"","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-07-18T07:42:05.689684Z","times_seen":2133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"\n  希望主题  https://www.itlaoli.com/blog/588.html \n\n","filename":"https://wzjsxx.com/zb_users/theme/hopelee/script/custom.js?v=2026-04-15 line 25 \u003e eval","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/libs/animate.css?v=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.016Z","timestamp":1781015336016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/libs/animate.css?v=2026-04-15 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: text/css\r\netag: W/\"69edc2af-af0b\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44811,"size_decoded":4552,"mime_type":"text/css","magic":"ASCII text, with very long lines (44811), with no line terminators","md5":"a08965f90af7e7c198d28b27983ce4eb","sha1":"5c111b4ecf3a374a437470251a84241f0475ad76","sha256":"aaa53ca1f3dda6fd7a998e16afe50b15f53d132601f897ba89e64f8189c35b16","sha512":"ed0e1b4a73677c9651549294ac3f2bc431d39fa496a375ec64f4c6a38cd60057efb729997794ccb47151781377a3f17044207e01addd96f2038b03f25141a523","ssdeep":"768:jT5ATOEEhfHwT1iADk9DW3uyv5Ar0e40kT2:XwT1iADk9DW3uyv5Ar0e40kT2","tlshash":"2e13b5aa4ce1228594220e55cbdc9fa84b3cc76364b15cef3386784b8745bad23de717","first_seen":"2025-11-06T05:42:36.901816Z","last_seen":"2026-06-09T14:29:30.378255Z","times_seen":9,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/jquery.lazy.js","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.243Z","timestamp":1781015336243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/script/jquery.lazy.js HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69edc2ae-cc5\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3269,"size_decoded":1310,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2950), with CRLF line terminators","md5":"db0f3067bfc3240c2c43c433effffa60","sha1":"73389d4b7b052b919d1ab2cc876b54f415011d3b","sha256":"851b65c7a668d1c58e660031e8afdca27a460c22916a4d925aa9e5d6605a5954","sha512":"6eae43d3ec4e192b42c83184606f9b0f02afa1c13ecf7141fb910951c4890e1a93b7dbecbb3cda9ea72b83e5ac30fa2c74deec3ddb63091123b41ba4b026f810","ssdeep":"","tlshash":"d061a2453e06a13cb05ea67fc61b0309551ac51ba2b5e871a83584747cfced3a3575cb","first_seen":"2025-10-13T04:05:07.220451Z","last_seen":"2026-07-01T23:52:18.690757Z","times_seen":22,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc/im/a9xp1g.js","fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","domain":"mmxihzuxbbdgqvsyq5512d.cc","tld":"cc"},"ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.246Z","timestamp":1781015336246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Apr 2026 20:07:43 GMT","end":"Sat, 18 Jul 2026 20:07:42 GMT"},"fingerprint":{"sha1":"7E:18:71:A5:67:F7:43:AA:76:65:D8:E9:11:A2:C9:85:DC:AB:5B:B5","sha256":"DB:17:49:27:1A:42:95:58:B5:49:00:62:81:E1:E2:E8:4C:5B:3D:82:70:EA:74:52:10:6B:26:34:09:86:DA:E0"}}},"request":{"raw":"GET /im/a9xp1g.js HTTP/1.1\r\nHost: sodmsizn.mmxihzuxbbdgqvsyq5512d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Jun 2026 11:17:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a27f667-54e8\"\r\nexpires: Wed, 10 Jun 2026 02:28:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21736,"size_decoded":4898,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21736), with no line terminators","md5":"d5ca6ca7acc25871421a84517c9a94a5","sha1":"38ce6a4e070c6661cd1ba15761c290a575155eca","sha256":"dbf0c1223c56a37dbaa73b22b9cfb51e98fde9893f4a23eb4d2ef1dfb4682826","sha512":"6a721da2158eaf03efc35b81f4e642a0be24543d20669f04e3f84b8cda86c1e038b5277d3f27b60b26e9671e69ff8775f7c9bd4338bc76270eac85228ee7bc74","ssdeep":"384:WTAFUdUU+dZkLoplBGm6BDN9BO7NTdbzHXa6gQMkR72CKWwgakAiSHb6Ql8XTYQg:WTAFUdUU+dZkLoplBGm6BDN9BO7NZ3a7","tlshash":"e6a2175963bfa80b4daf5901dc3a2e5c96f91cf20a4df81ece3b7284f624144c993765","first_seen":"2026-06-09T14:29:30.380386Z","last_seen":"2026-06-09T14:29:30.380386Z","times_seen":1,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":103,"connect":207,"send":0,"wait":208,"receive":0,"ssl":421},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/search.svg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.105Z","timestamp":1781015337105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/search.svg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 392\r\netag: \"69edc2ae-188\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":392,"size_decoded":672,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4f7f48d3a550d0298a33aff9cc3edc4","sha1":"55bb935005c9f0cf15bbf3208a132ba4c2e8d7fd","sha256":"4d5443a957625bfade7b60416fda4f64484ff5ee0ee01e2e8319e5999b34c541","sha512":"a9fff6cd29b54993a8f62591a24dc7ec4299f1aef4c25b32475f9dccbea0000e6b59979900697fdb14bb4db7934f77537e02982ac9b247411de733f1b53d03cb","ssdeep":"","tlshash":"71e0c0027332697db20c47b4efac71ab507a30d61a071b75a9f31d3120c49da683f796","first_seen":"2023-12-28T17:33:23Z","last_seen":"2026-07-04T11:50:33.760368Z","times_seen":39,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/upload/2026/01/20260101073958176722439818141.jpg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.256Z","timestamp":1781015336256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/upload/2026/01/20260101073958176722439818141.jpg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"6955b44e-20a84\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133764,"size_decoded":133674,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, description={\"AIGC\": {\"Label\": \"1\", \"ContentProducer\": \"zhipu-maas\", \"ProduceID\": \"20250628041015eda960b961c04393\", \"ContentPropagator\": \"z], baseline, precision 8, 1344x768, components 3","md5":"a2031e2968b7b478387a08c1f4e239ad","sha1":"31af2c96b1211fdd96babb188b1e12dbae5353c2","sha256":"ee8bcec93e7e6cc5955b2f3230d5c85e995fc7747c4602c19aedb86036b98c8f","sha512":"57be90f268ff2c763d0118cb07de5726f0e9e229a58c1861f1df07dd1497dfa2c31b26bba7e25e117058074db3b1d0e46e256e16264eb7afe52967f238afcf5f","ssdeep":"3072:72s4eRLTrm89jpH7e+cSs9BRgToQX0nFuQEh8GGEX290Ngfhtspy:ys42LPZx7e+cSwR6rX0nFuX82TyHs4","tlshash":"86d312336dba1d1b1357b6ef9e7aa28c03b052f9ec9c0c320e2859692058dedf52d591","first_seen":"2026-06-05T04:19:24.454057Z","last_seen":"2026-06-09T14:29:30.383784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/icp.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.260Z","timestamp":1781015336260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/icp.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/png\r\netag: W/\"69edc2ae-498\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":1463,"mime_type":"image/png","magic":"PNG image data, 18 x 19, 8-bit/color RGBA, non-interlaced","md5":"37975a3be8087f62933f7aa3e7e80d12","sha1":"f31c9f47faedf7f33b9580d6284ab891fb697560","sha256":"ee1106e436965c14c10f8bf7f7f2292af1a32b65332753122b57c91f2456e0eb","sha512":"9d04944d71873e6ef8b8438ecefb5efcfe3e332b7ab9c6d2844799d6788a1360b6e948ed9409bca9beeb45dfc37c9af37004db47d7a20721e694dac1f04f3e35","ssdeep":"","tlshash":"b121da6755e4eee750907520d2f423ac9c61d9aeddc4833ac4c84c747b2bf4441718a0","first_seen":"2023-05-02T06:34:11Z","last_seen":"2026-07-16T23:42:13.220235Z","times_seen":161,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/upload/2026/01/20260101074014176722441481239.jpg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.255Z","timestamp":1781015336255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/upload/2026/01/20260101074014176722441481239.jpg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"6955b45e-1ac1b\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109595,"size_decoded":108232,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, description={\"AIGC\": {\"Label\": \"1\", \"ContentProducer\": \"zhipu-maas\", \"ProduceID\": \"202506290647373cd9f492ce124b60\", \"ContentPropagator\": \"z], baseline, precision 8, 1344x768, components 3","md5":"2990a853cb31f42c71b1d68f4e4dedc4","sha1":"939819222c42dacd71ed405b4da4c6fe5305bca7","sha256":"4060505526d5cc65071ad9222778dd91590c49cdb71f4f31be53493393c90946","sha512":"6f2fc0c24db1bbf9af11dd9a424a31b55e8b399d9f0d466df374f5e1858ca0e5c06ffe49e3398fc906d4f8d9229e7499f19728c66c67530b1a4abfe7cda9c4ba","ssdeep":"1536:B7o3Dk3s3RcqTrmc5Gp7N/8yTz0M/c90l0AHClDgJpBNaIwjoRSYkL8HFtmF6d3q:mokKckz0jM/c9bFlMBoB4fkL8HFd6","tlshash":"eab3027a9252b9cb726c3976173fc96546ed232c1c843a0d50819b6c7bd93b0befe244","first_seen":"2026-06-09T14:29:30.386346Z","last_seen":"2026-06-09T14:29:30.386346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_system/script/zblogphp.js?v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:55.980Z","timestamp":1781015335980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_system/script/zblogphp.js?v=173540 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"61554fb2-1c24\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":2805,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7204), with no line terminators","md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-07-18T07:45:42.810497Z","times_seen":2581,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:55.984Z","timestamp":1781015335984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: text/css\r\netag: W/\"69edc2af-324aa\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205994,"size_decoded":53572,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13380)","md5":"679d65c1bf6b9a8fcef19e92ddba1990","sha1":"bbe92a5e6eca92c4fb0649c222322bbbf8025b11","sha256":"6f1bc48ac4bbfe79b3d5edec1e757bf565e5ae4896ce4c47ee7fa7024f5c90e2","sha512":"da664f7f411f20b78cb79beaa28f321e1ba86dffe350f14fb9669cf3b87859027685aa446700db34b63530eb1142fe85fc260e2561fcf5c284dcd291325b92f8","ssdeep":"1536:gOoCWf65WQXcj8kR6DUvmvADsAQsMkn2zWYNJaw57dGFIEK05DJoRuPckfUgYHu6:gOojf65WQXcj8kR6QvpgWXjEgFPifGeH","tlshash":"b614c731e650210cf137d766bad1a7ed7634c423e5230eeef35a7a69c68b8e90132749","first_seen":"2026-04-23T08:52:28.165768Z","last_seen":"2026-06-09T14:29:30.388959Z","times_seen":3,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/upload/2025/10/202510081759881074688348.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.254Z","timestamp":1781015336254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/upload/2025/10/202510081759881074688348.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/png\r\netag: W/\"68e5a772-11d5\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4565,"size_decoded":4810,"mime_type":"image/png","magic":"PNG image data, 130 x 45, 8-bit/color RGBA, non-interlaced","md5":"a5640ba2260966db32d2c65748fed513","sha1":"e17a840d8d070efa6edc1aa2999f1e9b9ec2469e","sha256":"8b422dc5baa79527e70d0592eb67b49e5a9028cdcfa3182dba4f220454426082","sha512":"2447eea45eb2d75c6ee13ebe7a75d18bc4487a056b7a8f57af909f3ac6539f0d070af2b9dd1e0817b592ebb9095f516b1b9c0b5db996bee71a32f68e2ba5e7ff","ssdeep":"96:ByS5qvVGKx8mAsG99hSfCGXM5jiIHBFTsnmF/X1nVAYzxT8jTL2kHgy3C:BEELNsG99hSfCh5jt8mb1l0TDC","tlshash":"c7917dc545606ff1c9d02e7b5017bff93e6280957c1a0ce2cdaa19aec68c78c97606e1","first_seen":"2026-01-21T18:02:00.961732Z","last_seen":"2026-06-29T18:43:12.780002Z","times_seen":13,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/avatar/0.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.259Z","timestamp":1781015336259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/avatar/0.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/png\r\netag: W/\"64ade32a-607\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1543,"size_decoded":1719,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"ee5d41a3d66ad74f9f9f8071b3c8704f","sha1":"f95789aa835923681db418eba2dbbaf8e0ade62c","sha256":"d284115b6f0994410d2466ab471727d867c1c183dcdafed233c902ece5d76b18","sha512":"72a11cb2d40b0ca85e5e387520e3f57fb36806e800797a386fd56b6ca93651858f9e3b066efe33d9aa827049c92f1a8f9bf8e7c50300ff47ef558602d2bda88c","ssdeep":"","tlshash":"09311be6b77d46b2f5987bb1c9949251c0312e825085cb138502c1a7b735e06ef7ddc1","first_seen":"2023-05-18T11:31:11Z","last_seen":"2026-07-17T06:00:28.6681Z","times_seen":445,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/libs/night.css?v=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.018Z","timestamp":1781015336018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/libs/night.css?v=2026-04-15 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: text/css\r\netag: W/\"69edc2af-2ecf\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11983,"size_decoded":3692,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1527)","md5":"373ceb187e7cb652d53eaddaba4f6030","sha1":"87863477b3ac25399df79099f8df61e17a4adf3f","sha256":"a97c96fd8d2bda9bd0f3039c759f5a83aab86367d8cceb676ff64675cc2529ef","sha512":"aa49e91db36fd9c28357814bfce14cd705db60682d7650e96856816063bfb0935ee83771ff6f61375ca1c1959a58b793e8b5cd59f2a0d7021d625f8faf71b03b","ssdeep":"192:tbLxJemXmRy8tFDtbVpcVswIozlwBtpaSBcgC15sL4H9A65vSLnflSpG:ZTy7jlVpcpIozlwBtpaSBcgT4H9AWvSR","tlshash":"ea327523af9a1bc63427ffab7c9ba510361a026489405bb47aade3f3745fcb470525c4","first_seen":"2025-11-06T05:42:36.93Z","last_seen":"2026-06-09T14:29:30.391171Z","times_seen":9,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/wow.min.js?t=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.023Z","timestamp":1781015336023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/script/wow.min.js?t=2026-04-15 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69edc2ae-2d32\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11570,"size_decoded":4098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10803), with CRLF line terminators","md5":"6ec00b9a3e193e8fb1c32ba408376ae0","sha1":"9159ac99dcb85e5e3c13cb219ee17d7225aab90f","sha256":"2781b107078099bb9e3a6839f65c446f52f4ddefb6c9c6e713545679b217359c","sha512":"39eaedd0c5c25490e58abc5d8469ee7fd01b45d46259d0222d5b3a61e4b098cc391414ff14d6e8f303bff35aa30d678cfdf465dcb4d8b86ccaf751f44421fd6a","ssdeep":"192:Ep+VAMxYMNM8kYR2Xo5wfJZ2BTJ3Ij+fyJqCdVSV8/ACgH:W+CM6MNMTlKwhiFTaqC77M","tlshash":"d33282c0765930318b9b66b7931f4205773a25af506c049cfaac9de96a70e15a32bf34","first_seen":"2025-06-02T19:38:43.511707Z","last_seen":"2026-07-01T23:52:18.680608Z","times_seen":20,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/beian.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.261Z","timestamp":1781015336261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/beian.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/png\r\netag: W/\"69edc2ae-704\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1796,"size_decoded":1792,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b4182a74ffdbd89a166954c9e1522308","sha1":"6fa0b0e62e91805d6cfb998899e9cddebbb5944b","sha256":"b8dac8cae1fda3dd2ac0822c192889d56993475d775e8105aa847dbdd6594b4a","sha512":"666472c50a07dbcbedc37f6186862f1f16c13326fa3cd89470776e0afe9ce54150d7273b8e76dde0c6f4470e47664363ded8949a976c81546e7d558617353d62","ssdeep":"","tlshash":"d931e72dfe022a83814fa2413cf585669c010c4495c0ebeabcefc0092db82f644f9acf","first_seen":"2025-11-06T05:42:36.929046Z","last_seen":"2026-06-09T14:29:30.392502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/yueliang.svg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.107Z","timestamp":1781015337107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/yueliang.svg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69edc2af-6ed\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1773,"size_decoded":1178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a99d2bcef3e0e0f160d0efb8d44b075","sha1":"9d32ea6495148cc4f5f480f6f8ea53901401a553","sha256":"c9a798a51f67d0056eb70770ff6ae05c5ff36bd3d44494d387d4311c48725f77","sha512":"108cfb742c09c719ff809a7bcf89e3c2b14172bddd009421937211b2c351ce287f444b0e31befb9d3a7b7aedb5e6ebfb7856f016320915f7fe78ac91e7e0a999","ssdeep":"","tlshash":"823153d8d97db834eab762c7ef547b5c667829e3848ac170323488709ca2c92da006dc","first_seen":"2025-10-08T22:04:47.389054Z","last_seen":"2026-07-04T11:50:33.755462Z","times_seen":33,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/aside-author-bg.jpg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.110Z","timestamp":1781015337110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/aside-author-bg.jpg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"69edc2ae-6cbd\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27837,"size_decoded":27978,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 920x300, components 3","md5":"d6714d90dab239023d79370cb04cf69e","sha1":"576197b3f943899b894e18743b1ffd389a99a148","sha256":"36a2a9cd50fc65951e53e57c4ac621e7611899058bb46d2912aa1104c812e905","sha512":"9c3cfff3801f547aeacdd8a30e56b2a3d817a05267d1b8dff8e1180f2256d597ba90cbf9542b390fbfcfa4247c6b0b3571681a70aedef1b025332ee30fbff61e","ssdeep":"768:qEUnZGMeesqLFTNNFQuuM/Tlyh9SwB92tzdZ5nGz:qEEGshTKuFArfBsnm","tlshash":"57c2e1ead54d4e33f2cd667f9d1097f5bb28a8371903c14be4421622b917d0af4d1869","first_seen":"2025-11-25T19:48:22.972602Z","last_seen":"2026-07-04T11:50:33.770302Z","times_seen":10,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/upload/2025/10/202510081759881099154136.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.535Z","timestamp":1781015337535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/upload/2025/10/202510081759881099154136.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nCookie: timezone=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/png\r\netag: W/\"68e5a78b-4b9d\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19357,"size_decoded":19645,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"f36b80023cded5c46739c808aef85a5a","sha1":"b8637dce827415891983c3966b55a6f0febeec10","sha256":"bf46829dbd9e00b265b5f57807d071836f27f40eff7a3c3ef6ed2ade63d3c447","sha512":"b08303a2f4e0f52f1016b89cccea29c776e6842bedb1c9a5fec9240dc7fd1b961a3904c9dbd8f22c43b8b5cd931e9ca55315c2c677de22092dc684d896fc86f4","ssdeep":"384:ZwaL3py2bv77L4CP5ttmIfIwIUK0TH24KbHNBOy3SRJfwD:Zwij0aJGwIU7TH2tbH7OLR1M","tlshash":"b992e04827b3fed4a8259c78a2f36228bede335601e0aa784995d4701730de3110e6e7","first_seen":"2026-06-05T04:19:24.473658Z","last_seen":"2026-06-14T19:20:03.767396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_system/script/c_html_js_add.php?hash=\u0026v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:55.983Z","timestamp":1781015335983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_system/script/c_html_js_add.php?hash=\u0026v=173540 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\netag: W/daa05fdcf4205fec8d21ca5a58180462\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000;includeSubDomains; preload\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4503,"size_decoded":2160,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1254), with CRLF line terminators","md5":"daa05fdcf4205fec8d21ca5a58180462","sha1":"7a43f3f84ffa8f4fcf5b8549b8fcb512db77dc00","sha256":"9dfdd2cd0b07d8ec3e5b2114155156dd0aa0b028980859fadf70268e11a40c6c","sha512":"7839ed9f4c042e02e97a3bb71757d94f080530a87060c09d1b4a63783ce3bfc26dfd4121c7ba7ae466de45af11856c21ec44bd6bcac9a94d91cc271b68744649","ssdeep":"96:6abV06qZuiMRd1BhXJnbZ2THKrOUiMMKDg8E:6Uvf1BhXJnNAHKiMNDLE","tlshash":"7691b6499e5a11a6243763f7c8af1604fea2166b4004cc26fe7c54682f71f849163fbe","first_seen":"2026-06-05T04:19:24.467786Z","last_seen":"2026-06-09T14:29:30.398845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/top-fr-bg.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.103Z","timestamp":1781015337103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/top-fr-bg.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/png\r\netag: W/\"69edc2af-b130\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":45360,"size_decoded":23818,"mime_type":"image/png","magic":"PNG image data, 1240 x 45, 8-bit/color RGBA, non-interlaced","md5":"b0d04bc3195f2b24d9b967a37c1ec75f","sha1":"55cb72e43ff0422d313d5b6a10d1b7227b4c43c7","sha256":"fe6f8f03460ee59adcfc642aafc8cabf9fc522382e1e0c23e088c78d3ddef8f4","sha512":"492f1c3a521714ec023a354b0a024fd9193f3d974bc4e4b0c5b17781af858ee44a1712cc5d498dbe5610d744320a22fd8d4833e466acd02f2c5b96d72f5f5600","ssdeep":"768:ZdWGz+MbESmrkchHOiAPTwKL0CoEH/MPm6TxF3wreD1bcx4oZrZQnbpC:CWEPVuEHBMKoZZQk","tlshash":"1d13d097b0a9e7e278627b2381620d08e9012acde5dc75b19c7ed1311463363edcd62f","first_seen":"2026-06-05T04:19:24.527386Z","last_seen":"2026-06-09T14:29:30.400811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T14:28:54.378Z","timestamp":1781015334378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\nx-xss-protection: 1; mode=block\r\nupgrade-insecure-requests: 1\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000;includeSubDomains; preload\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":59370,"size_decoded":14666,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909), with CRLF, CR, LF line terminators","md5":"30c6b2322ee4b91f00fac8477ae65a53","sha1":"100e05683f238d21b5da91d0eef1d501fbe5cbc1","sha256":"d34ca072efea7460c0f93a4c04e806f91a2ecccd4f5991c756a1af1a9b890d25","sha512":"ebf8c5e15feb3c27c17677fde8dce25f1f4f157ba889cc37fd9ee81304fdc79b1bf63bace8aceec32ffcb53cf425c291852f3de980abd81c59caed4f415486f5","ssdeep":"768:eAIIGt61M9/w64lg57o4kfmGanseDlFEAGNl3vgKVS:PIIGg1KZlVfSIJJFTChvlVS","tlshash":"64435522ee856e638b015fc5437a064cf1ca9579ce2f67c37abe13c46e49e1e560342e","first_seen":"2026-06-09T14:29:30.402611Z","last_seen":"2026-06-09T14:29:30.402611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1373,"timings":{"blocked":-1,"dns":324,"connect":208,"send":0,"wait":416,"receive":0,"ssl":426},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/jquery.min-3.6.1.js?v=173540","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:55.979Z","timestamp":1781015335979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/script/jquery.min-3.6.1.js?v=173540 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69edc2ae-15d9c\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89500,"size_decoded":35048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-07-18T08:26:25.585866Z","times_seen":20999,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.622Z","timestamp":1781015336622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.js HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"64ade32a-eecb\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61131,"size_decoded":25308,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4799), with CRLF line terminators","md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-07-18T07:42:05.689684Z","times_seen":2133,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/plugin/UEditor/third-party/prism/prism.css","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.623Z","timestamp":1781015336623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.css HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: text/css\r\netag: W/\"64ade32a-1039\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4153,"size_decoded":1772,"mime_type":"text/css","magic":"ASCII text, with very long lines (446), with CRLF line terminators","md5":"b723c2f958f530879d534e05628b401a","sha1":"2a7ba0076d94322373e6033e8e7d414c77b11592","sha256":"e82e0b58f5c11f55f08603ea35e2aa7612d4e5986e5cb6bc2d4c53e3c1c9c149","sha512":"f5537e2e51c8e8c210a639646fad3230e2180e5c5ad2597115b24d1253e73981469a2d3155e28b8ba38e77776fc6933a2ba45d0e9f00fd5876d7264f7d6e46fb","ssdeep":"96:FJpT8IVUVLK5oSXX1V1VIHvtVtVQnVAf5rVKHVlVaBkBABvBUBQBBOB9BlBWBnBb:B8dLK5oSXXzzIHvLLQVy5xK1DiQcpgQ5","tlshash":"958110219d7b159d30076a67e8f1b0243816aa19c993267cbf30d2909f43fdeebb3519","first_seen":"2023-04-08T15:33:58Z","last_seen":"2026-07-18T07:42:05.680504Z","times_seen":2044,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/new.png","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.109Z","timestamp":1781015337109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/new.png HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/zb_users/theme/hopelee/style/style.css?v=1.9.0?t=2026-04-15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/png\r\netag: W/\"69edc2ae-b1a\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2842,"size_decoded":3021,"mime_type":"image/png","magic":"PNG image data, 52 x 53, 8-bit/color RGBA, non-interlaced","md5":"3fff40305be431762eec1bd9575cc990","sha1":"e13297ca12bdae04a1e6abdf1f88d5752eb5fd52","sha256":"de5af4d7de2905478f223de281a7ebecce98f84e31f59637c788bd59146ed726","sha512":"e2b7d9cb3bc92b6196c4615f1f4c8baaae6dcd3befb059fa4edac1dc80b736791224d366b912c037e02ab6152a0fe31dc38959e4d0eb0df25f12be9b279f1786","ssdeep":"","tlshash":"8d510a33d72ee213d4e36327836550719455ac46f187f11848be92e4ba3b018e594b2b","first_seen":"2026-06-05T04:19:24.499119Z","last_seen":"2026-06-09T14:29:30.421533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/c/font_2088992_wlcw2m28y7r.woff2?t=1752717384420","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.146Z","timestamp":1781015337146,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/c/font_2088992_wlcw2m28y7r.woff2?t=1752717384420 HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://wzjsxx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/script/custom.js?v=2026-04-15","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.021Z","timestamp":1781015336021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/script/custom.js?v=2026-04-15 HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69edc2ae-77fc\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30716,"size_decoded":10277,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7503), with CRLF line terminators","md5":"8c5fc4ba77e23cb39f5400e63a84486d","sha1":"e16ee53fcc5dd1d23863c45a63b4d28108ff1f4d","sha256":"93d133db4163b9e86d5d79b7036dafb2a9ba7615e370c1a45507e0360578ad84","sha512":"9bb332ca3c23f051164139d3482217c673e1df95943e88cab88d32c10e902fe42132237005b22b2f66e862ca493f283aae981d8aff3d5d12db3e416543225482","ssdeep":"768:eXufEc5HZgCWOUTZ5JDi/wlND5ZqVlVo0CYZvst:eefeOEYKZqVXoL","tlshash":"d4d29598b755d22b47de2d57947ea798223ac533c0c5f053b3acf98d0da4a0ac19e9cc","first_seen":"2025-11-06T05:42:36.93465Z","last_seen":"2026-07-01T23:52:18.677202Z","times_seen":15,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/upload/2026/01/20260101074008176722440828607.jpg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:56.258Z","timestamp":1781015336258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/upload/2026/01/20260101074008176722440828607.jpg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:56 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"6955b458-1cdb4\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36064\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":118196,"size_decoded":117319,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, description={\"AIGC\": {\"Label\": \"1\", \"ContentProducer\": \"zhipu-maas\", \"ProduceID\": \"20250628013919410a0ca89a3e4c71\", \"ContentPropagator\": \"z], baseline, precision 8, 1344x768, components 3","md5":"ee13781278cf904c967451ac7e9bde5b","sha1":"f52affd49f40b5989083b5eb92a07f38c47b865c","sha256":"63488ebf3ffe0d2b774b8ae79b76563a4c512e95c00fa49a4083c9d9a80679f0","sha512":"33650ecb965152fb57966665944b0abd6f33aa1a9b724681b332eee74c32c81f0c8a5a9488cc8e11e9c77ce01aabce2e0ce938a896ac22b72965659197819353","ssdeep":"3072:M94EGDYhYcvTYdTZ1PB2Ioxhy+Yh9Q4eMjyZDDS8Hpo3:hYhAdTZ3ixk+69UMgjS3","tlshash":"dcc31212f817ae1f5d2a969c634bf30d69c88a1ae8c5de3449a0dc8cffd9dd5c4094d8","first_seen":"2026-06-05T04:19:24.512667Z","last_seen":"2026-06-09T14:29:30.425912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/wxqrcode.jpg","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.112Z","timestamp":1781015337112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/wxqrcode.jpg HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"69edc2af-1604\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5636,"size_decoded":5086,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 258x258, components 3","md5":"8f103e2160b4a4f0dda0399cf83c61fd","sha1":"ec4bf43508d352bd3022aa3b9ce5aca1499e818e","sha256":"db89d51627a74457bdf3f5c783ec90bb69b8db094e55503583cd698079e28d6f","sha512":"d0e6d8590b63d3a3c2124c8767c6f73f5927ef905061e59b39b8a335d9a27e92259a8c3174a54c53ff3a409326dd2fc80ce6d13dc9942db59f88253601172fad","ssdeep":"96:LEYwxVjvqIi7CZbKvi6b9P61TVtdZ7x7QkKa4ZUqUABa47ZLft1k9:L3weIblCi6b9YRtHsUqba8V1k9","tlshash":"c0c129235f6c46a2582907a6bd530c9db5d27f4cad8279be14530ed3fd724858cc905f","first_seen":"2025-10-01T00:41:13.722243Z","last_seen":"2026-07-01T23:52:18.690171Z","times_seen":29,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wzjsxx.com/zb_users/theme/hopelee/style/images/grey.gif","fqdn":"wzjsxx.com","domain":"wzjsxx.com","tld":"com"},"ip":{"addr":"156.251.216.141","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wzjsxx.com/","date":"2026-06-09T14:28:57.334Z","timestamp":1781015337334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.wzjsxx.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 01:43:28 GMT","end":"Tue, 04 Aug 2026 01:43:27 GMT"},"fingerprint":{"sha1":"6B:5A:57:D9:C4:09:2F:DE:98:02:B9:B9:8B:64:7F:81:33:ED:5A:6D","sha256":"05:F7:63:60:9F:8B:2A:FF:FB:99:72:B2:B9:8C:61:B5:5D:82:6A:F9:17:C3:B7:8E:9B:CD:92:9D:04:D9:45:8F"}}},"request":{"raw":"GET /zb_users/theme/hopelee/style/images/grey.gif HTTP/1.1\r\nHost: wzjsxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wzjsxx.com/\r\nCookie: timezone=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 14:28:57 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49\r\netag: \"69edc2ae-31\"\r\nexpires: Wed, 10 Jun 2026 00:30:00 GMT\r\ncache-control: max-age=36063\r\nx-served-by: wzjsxx.com\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":323,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ed280a0ea3cc38f3cbbc747acfbef47d","sha1":"6bdcb32ee75e957a5085c010f4dfd0c716bfdadc","sha256":"8f69e10876805b747a3ad08a818d46ac7e731b1af417ea6e259d9b6b7deb65c5","sha512":"4248e293bb759c3ac0ea71f545e10e85d0c3c7f1237ce8b18c6a3fd00499a11bdc0252c938be87359fa673c8e7a83c7cc6fc5d12718a68844c2615e5dca3527b","ssdeep":"","tlshash":"78900247b580c001c551c0301c0493541290a9604905134f6498336d9d761a10811404","first_seen":"2023-04-05T11:17:29Z","last_seen":"2026-07-18T00:15:49.682793Z","times_seen":3973,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"wzjsxx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"wzjsxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}