{"report_id":"a8d37cd4-76ec-41aa-9379-3e5a292797d0","version":0,"status":"done","tags":[],"date":"2026-10-05T05:52:13Z","url":{"schema":"http","addr":"ebay5678.vip/","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"ebay5678.vip/m/index","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"title":"Shopping Mall","dom":{"size":153903,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (61848)","md5":"66385126939b79118d53b564210b103f","sha1":"48486ebaee1d660642eefa7bf6dece80a939df4d","sha256":"593f3db0d8c35d712a5b8986841ff2e528fb6789e41b2faa018aaf413317b4f4","sha512":"09e3badd11da2d0985bcefff9c1a5b4ad710e404997afe51ea671cb05790f893b69c5f15dc5c74cdfa480099da9f3ef2ce49030097f666370c6dc3bfb4d387b7","ssdeep":"768:WEimdL1EIYhbaffYtY21D3VOjVoPhctEU:tLKIsafYtYmi","tlshash":"4ae3e471b49050aa81a7d8d5e0307e4a67d3e30ec19a858636ed8fc59fc3cadaf541f8","dom_hash":"domhashe018f4aaf6f852a5fd79a2f37b2424c7","first_seen":"2026-10-05T05:52:30.156614Z","last_seen":"2026-10-05T05:52:30.156614Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ebay5678.vip/","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-09T05:52:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ebay5678.vip","ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-10-01","domain_rank":0,"first_seen":"2026-10-04T17:27:29.195675Z","last_seen":"2026-10-04T17:27:31.690188Z","alert_count":222,"request_count":38,"received_data":2094210,"sent_data":18593,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"aiuqt.amazonoom-online.com","ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-10-04","domain_rank":0,"first_seen":"2026-10-05T05:52:21.279764Z","last_seen":"2026-10-05T05:52:21.279764Z","alert_count":0,"request_count":23,"received_data":912485,"sent_data":13557,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":13,"received_data":1712311,"sent_data":6382,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":1400,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ebay5678.vip/lib/flexible.js?2222","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4065,"data":"","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-10-05T05:52:30.178912Z","times_seen":966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-05T05:52:30.219171Z","times_seen":4806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-05T05:52:30.224087Z","times_seen":2602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","size":3883,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-10-05T05:52:30.192931Z","times_seen":3689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/app.7539c544.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8bbdff8657511e3261ccfd4e5b6ca37","sha1":"1bc2cf46ad35b8f0d195cb149d98c64a5174c3c3","sha256":"aede838bce48a215921df0918eff503f785f30c44566621b246f333c343e8e6e","sha512":"f01ea856c3676aaa8642fc366b4f84608202523d96e76a53d1ea75f697f73d59dba2535f91fe6d94d03cc54eb219581703683633cded856e77ec067cd30cf292","ssdeep":"12288:3oze+f2d6qFIDu2XKkd6lX8I82S11yo52ZQi3Qn1+paHilwbcpEe9ogO/xXVUaNM:3NHqCwA/uA4hV8","tlshash":"42557d9833de76f60042e456500f3e3cb1661ebaf75691816c31e69c26e9ab14633f3b","size":1285174,"data":"","first_seen":"2026-10-05T05:52:30.298596Z","last_seen":"2026-10-05T05:52:30.298596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.2198Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-05T05:52:30.161215Z","times_seen":1590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","size":57411,"data":"","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-10-05T05:52:30.163354Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-06ae24a4.686330fb.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"676e3a2df47d8e40c29c2d1a67127eec","sha1":"e54e8144ef939162c151a843933a98ff020a2641","sha256":"6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4","sha512":"4314d28a687dba60202a2a5974ea1b39b02a45a2fea359503396553b4bf9c1eebcc4168357fe2e43875ddd2e61c2af72b926ee6a61bc978fae9474a77de421bb","ssdeep":"","tlshash":"c0b02bbe2804790808bfa0e4300b33d8048301003f711ce507b020902b74e8e4303a4b","size":129,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.179918Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.299989Z","times_seen":1237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-05T05:52:30.162861Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.235689Z","times_seen":1272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c51f03d35129d9d1a9da65b24cef7fa7","sha1":"1e1d550d978378980dc3aeb60012da86c2355c4b","sha256":"339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c","sha512":"8c83157d1a2d4bacafc89ed01d444551151772f1119272c303ace71aa12b6f1fba29da8c9597e2a9baf670c93768286a405a70186b92ba5aae84554b9123c1eb","ssdeep":"6144:K4lrdS1Vqp5xb+XzxEXdUfM2Z0a54VXTnDBHiSuLx8isMZg07LQi:7vS1Mp5xb+XzxEXufM2DEDVHDub7LQi","tlshash":"04c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":585656,"data":"","first_seen":"2024-03-05T16:56:16Z","last_seen":"2026-10-05T05:52:30.167057Z","times_seen":928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"981279ecf3a46fdc0768ba2c90a8e03b","sha1":"79c0ade5e1847d13968abcb23003dd6fd66546f1","sha256":"a1b2488a19afe5c457836c56613f33560025673fa2c594aff43b6d637139f931","sha512":"b61b4d0f2c4acdfff03cd7383938e2707627873dfd9d4467fe3561401b7d85e10faa944f1968431176369ca34e35d82e9af660b5b1e7fef089e28711dbeadb65","ssdeep":"","tlshash":"f921a42c2d5babf8930338b1a032c65068f8e51ff114af0677ae0fd04b757ee8818814","size":1206,"data":"","first_seen":"2026-09-03T14:14:04.734405Z","last_seen":"2026-10-05T05:52:30.301922Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-vendors.42f07336.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdaaed4e9e1d5e0322ea968e6f47ac0c","sha1":"85c58af8151ed5badcdca952295e8c6e7b3e1e15","sha256":"c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8","sha512":"e23c153981e588a4d6b99c8341da319ce7e9bb16036ff952a8a469910640505b6e7ee7bb9e6d06dc59082f537053bb46cc8d800b82de8a730abee7d743bf03d5","ssdeep":"1536:qJuH03+0goh0dbU2Q+39Ya7C5x+eccVdofh3q4A6R:qJuU3bCbU2Q+3MXccgpE6R","tlshash":"0553e788f2d5b070439771a8402f610bf37ae959b44d8498f625e8e1bdb8dce546bf38","size":65536,"data":"","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-10-05T05:52:30.230598Z","times_seen":909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-dfba482a.deb34a00.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9afba0a915c4e92fbc11e5c078660203","sha1":"2ed0fa286400a75a06d35fcac18210ec3dbb327e","sha256":"cdfaf433fa8671287cd00eccae2a12ed217572043ebb1e37de7aaac8d7994724","sha512":"a7deed7a53bc8a321fd20890746d45c0d5fec8660eb258ad2c79e8d8bd1e5545d95489df047eb790b658d35441c3891b1e0da154f847c8715f4061eecd16fb60","ssdeep":"384:XaR6aUGUDUPUbPE8ZpljxIfP5htXnp7GZR/6h:XaQdgshpltAp7iK","tlshash":"ecd2a619b9c7f56adc6aa021402f2935e1352ed5a025f081f734cea0a5b9c743b2dfad","size":29636,"data":"","first_seen":"2026-10-05T05:52:30.187714Z","last_seen":"2026-10-05T05:52:30.187714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/lib/jquery-1.11.2.min.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.246485Z","times_seen":1992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.201403Z","times_seen":1294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"644f13180f8d398c886f534b07044cdd","sha1":"2d3349d384b50a385ed0b0d84a256be60a1e2201","sha256":"f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6","sha512":"700886a3c2a288eeadeec4b09884566eecb30f2530259b18a45147f07a02103fb94e144ed643f690de26e8b76119aa639f210c0d687cc957c82318be053ec72a","ssdeep":"3072:XuhzovpPNdJ+fzFgMxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIum/yXN:+hzopC0TmRQBPSWyd","tlshash":"0b54d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":279653,"data":"","first_seen":"2024-04-24T18:56:37Z","last_seen":"2026-10-05T05:52:30.272348Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-7721dd77.0e3d8694.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"50a232a7a5154e825f186f95acf29aee","sha1":"802fa9205750afec336d36539e1a913906088396","sha256":"ea9c81db3bf4e708fccee76f211080e15889d6a7efb7134d71e6d728fc0ec5b1","sha512":"3f33f5039d50c9086497763f636dbcca0652a04b23a43337400784b9774a56b6f87bc59100b119d45fca2663fdb7ad9240957851aeece61f177420eabed8eed0","ssdeep":"","tlshash":"fab0127d3440b41604bfe4d6115b33f63c5f01042f7218f40b6500743e65acb490568b","size":104,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.240938Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://ebay5678.vip/lib/flexible.js?2222","line_number":12,"column_number":17},{"level":"log","text":"devicePixelRatio = 1","filename":"https://ebay5678.vip/lib/flexible.js?2222","line_number":38,"column_number":17},{"level":"log","text":"dpr=1","filename":"https://ebay5678.vip/lib/flexible.js?2222","line_number":68,"column_number":17},{"level":"log","text":"Locale.useen-US","filename":"https://ebay5678.vip/js/app.7539c544.js","line_number":6,"column_number":625914},{"level":"log","text":"websocket连接成功./api/websocket/server","filename":"https://ebay5678.vip/js/app.7539c544.js","line_number":1,"column_number":13936},{"level":"log","text":"订阅/refreshNotice","filename":"https://ebay5678.vip/js/app.7539c544.js","line_number":1,"column_number":14597},{"level":"log","text":"订阅/refreshUiUser","filename":"https://ebay5678.vip/js/app.7539c544.js","line_number":1,"column_number":14597},{"level":"log","text":"订阅/refreshDict","filename":"https://ebay5678.vip/js/app.7539c544.js","line_number":1,"column_number":14597}]},"http":[{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/ic_recharge.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.214Z","timestamp":1791179500214,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/ic_recharge.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 5306\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-14ba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5306,"size_decoded":5546,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"4b2c9005ff99756304faef3c4ff5ea48","sha1":"08a7267332c03d7be5085eeed922fc2b24877551","sha256":"3c2b701213291eea397239d25d29bf856dbbfc98aec1ff8d4c53b640b906330d","sha512":"5396b27c5947fabdbf9225e00ba34583199d9e8ebc17d070be51464057d2bc1aefc8b1a9eb8c739053827efb451f1163802abda88b5755ba5c0fd43545adcac2","ssdeep":"96:bSMllcHitlIxv9vk7C1+I4wWHLihk/xIPLdRhyi6i9nI5P3LbzqWBbJ5:bSHIIHUCD4waOLfhTD2zz5","tlshash":"68b18d888c450c5d330d0aa532e64b03c01feba2839d2e049dea1f5fac1cc723d683a3","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.158617Z","times_seen":113,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/3.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.524Z","timestamp":1791179500524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/3.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-22a3\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8867,"size_decoded":9001,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"e4a31cebcd48ee42064cf018c7f7ca39","sha1":"cfdfe2bc0addceae1a278b3200f26e892442a012","sha256":"4817a82e06c2b1293ba0c004e25171fad0907185d9f908071da98073c97af82e","sha512":"5f275514fa941b217090af718ddcd3f5e403d79a9202f3743bf25eb1420f6eb906b99f75f0802c9477d012c255b7896c754912b9d97179d96942413ddd5aa536","ssdeep":"192:BoBlcRpVLro+q/cXMr2nQFlFyPztChcQfxo5Z1S:NRpBro+q0MlaZGs1S","tlshash":"86029e15f0156c57a63bb6a6836958c0bc09d18e30860c64d7cebe997365ca5cc40ffc","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.159319Z","times_seen":391,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/app.7539c544.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.125Z","timestamp":1791179497125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /js/app.7539c544.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-139c36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1285174,"size_decoded":380127,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55249), with no line terminators","md5":"64a32f93e8c370eccde650bb5feaf165","sha1":"441c300d720fd3d705e0be4d978b314b8ea5a2e5","sha256":"dab25dbc17766e2fd8757513ac254aff7ecdb36b0b2574a819288fa3ae824aba","sha512":"68e357431dd51f9d47a542151f240979757a2cd0d6e3b1b24de4f70f9ddd58a529857efd3c276e39427030f0d4651c54fd05827fcc91fc3d06d9ee81c08c80ef","ssdeep":"12288:3oze+f2d6qFIDu2XKkd6lX8I82S11yo52ZQi3Qn1+paHilwbcpEe9ogO/xXVUaNH:3NHqCwA/uA4L","tlshash":"f5256c8433ee72f60142e856500f3e3ca1661ebaf746d1c16c71e6dc26e9ab14637e39","first_seen":"2026-10-05T05:52:30.159924Z","last_seen":"2026-10-05T05:52:30.159924Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1828,"timings":{"blocked":-1,"dns":1,"connect":225,"send":0,"wait":463,"receive":685,"ssl":454},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.137Z","timestamp":1791179497137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7clrFt6r5ZLsJSweOIoP%2FTQXGw1pxVd2%2BalYGRhi7iSeUBq5MOmjGZS%2BkUsV3YSW6zJBoOjqzjSyMkVJu49525iNdSDo2OfTEOl8y%2Bd7U5OO5Ch8%2Byf%2FeeGSm0AO2CmVdfr8hgU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d11d000731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9875,"size_decoded":3786,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-05T05:52:30.161215Z","times_seen":1590,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/cfg/202610/03/8912aa52d46747018dca058f12de67ce_.ico","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.211Z","timestamp":1791179500211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/cfg/202610/03/8912aa52d46747018dca058f12de67ce_.ico HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:41 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 Oct 2026 14:30:47 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:41 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":10030,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"89e199dde523b91e740083c4c8db4f13","sha1":"77f7f40e8bba29930f81bcd9dfbde8e16e86fe77","sha256":"8b4c9021260976ce74fa6c11111899311e7a4911ace7fe55ddd76cc4ab9f1db9","sha512":"9ebd3bd4282b0baa096cfd83365445178f8f6314067b05d04ff244e1255aa870e1b5f30763ebdc5e69e116fde4b2cd93e342781aca48fe7b95e0fc02e2889bb8","ssdeep":"48:9oQnnn0PSS8NzPNwfr7nsWYGu2y0BwT0HSJYjMnqWM2Cdh1M7CI3H5b2NGFtFRKD:9GHxICIdW7uzq","tlshash":"2412376aa208bc00d7da4f3cc77958ff924a4940db3d2057f0e2715eadad1be4492a8d","first_seen":"2023-05-08T21:03:54Z","last_seen":"2026-10-05T05:52:30.161795Z","times_seen":478,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":39,"connect":143,"send":0,"wait":418,"receive":134,"ssl":725},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/1.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.521Z","timestamp":1791179500521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/1.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-4922\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18722,"size_decoded":18304,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"3959345f02bfd3d6d23caea239421486","sha1":"6b3a7d485bf821b44756370daafe7887eac3faef","sha256":"9c31875158648f5fd608decaa75ef24630d45a12a9950f301fce4ac2814c827f","sha512":"5895c63b0d04e95e847d30b72cb774f65373ebc6f2b39fa9f81e82a687a85754cfb26a666c9ce61be566f2a265738da37acc893ac5f25210ccb4274f47575e88","ssdeep":"384:6OJnQgn+7xREPkpGf5Pp3t7yqujGILm2D6aOI0/Jnu6+hyQ75cV+:bJOxREdpkqujBLm/5I0tge+","tlshash":"5d82e026fb1a2d45ebd9b24a65c2663eb4671b935360e3a0fcc8ccd44c601a2d41eed2","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.162368Z","times_seen":389,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":142,"send":0,"wait":437,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.132Z","timestamp":1791179497132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 966259\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FCKlW6rzNqdnczmQlgusl17LEkmzDIp8LMySRnRJsMTayzh2EAdObVajyr3ymvN3uGKhPp%2B4x1ArHdUH256lbrXxoEyGBHppTGbAwNx4%2BzazUqAFZZgq6qOeLOaXU94nvP7Mu4u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d11cfd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92051,"size_decoded":28076,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-05T05:52:30.162861Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.151Z","timestamp":1791179497151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.6.1/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 28 May 2022 05:01:58 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lyb0aU%2BBrLTyVxH8nIX%2BPxEfkzWy%2Bhelx25ULL9FOumPtRaQhEwPESInWFzbSocJsuMw0FfTZqB5hTpw3vSIhGE0vUlTMSNjq72WsSuN%2FefOGhpZUdxcdDU%2F44ciO0ftCOxeX08D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d13d080731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57411,"size_decoded":15479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57310)","md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-10-05T05:52:30.163354Z","times_seen":145,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/e130552be6cd4f828b1b6ec17d71d243_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.854Z","timestamp":1791179500854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/e130552be6cd4f828b1b6ec17d71d243_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 08:46:27 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10694,"size_decoded":10834,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x300, components 3","md5":"e5af06048416952a2a03488e2c387861","sha1":"f521b531d812ce1bc1bb0cef2a46023c36ee0492","sha256":"feb57d389e007085550d7904266f6f5240364bb8be769f80282e7361a8e7cbd8","sha512":"05658551cc11f224c7334e9141e1bc90ed1c100c4db1f13de0f43822e12d1bf6e1b1c69b2a506fc632713fee1c5d2e0fa536eaf797d69b83a12076545743d515","ssdeep":"192:Ytm5LNh2HcbVSTKBJeJmTjG6n9qbJKTuFQAx5Vp1NXXA8UvchJ:emrh2HcbVSTmYmjGaQK8Bbb5UUhJ","tlshash":"2222be71969b45daea7ae93b03fe271098cc3cc9244c0954ed21eb697d25fe02ef3056","first_seen":"2026-10-04T17:27:38.038244Z","last_seen":"2026-10-05T05:52:30.163846Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/716212c03d914939adf296698e2784e1_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.857Z","timestamp":1791179500857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/716212c03d914939adf296698e2784e1_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:02:38 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51676,"size_decoded":51280,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 296x297, components 3","md5":"c50083ef72ea24995deb41b7411c9ff9","sha1":"c12fff4bd8757f5871f6b5e98dbf5ea5dd90ae1f","sha256":"cc70e8135936827907a1f7c35ceb346c8900d49779343b1d533188902df5f74d","sha512":"cb9ceefd2b7f5e8855b3ec49a73d3798405e50cc77497ba07ceda45719d2c5adf810a2630fc6e4ec4c0435a5edb6effba03a3b183fa384099d60d40f108bf6db","ssdeep":"768:xAWllh+TeRxJBQlwW5fTREGvhYTGNgxBU8IYE6MMSWoTi31RrUTW:uWllh+iRx7QnbRtpYTGN/8bMMLFRITW","tlshash":"da330276a81991178c27f476133537ca332be983c06369a78af8c9fc50ee57b0c5a1d6","first_seen":"2026-10-04T17:27:38.070237Z","last_seen":"2026-10-05T05:52:30.164427Z","times_seen":3,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/616c24cbb77345ec850c73071b261048_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.865Z","timestamp":1791179500865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/616c24cbb77345ec850c73071b261048_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:03:33 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24037,"size_decoded":14624,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:32:26], progressive, precision 8, 300x300, components 3","md5":"b5d58e5d51a79bcb2a0aa983d7df7364","sha1":"ff1f859e19f7859e5ee9cc31862ced29813de6a3","sha256":"ee3a144d36cb81f803bc70d73e644bbf209af454c3ae677cae7cad1075d9e06c","sha512":"bfae568aee74da4c79e0062244a00133029b2ce1f86f8acfb53a9b2f6ab0acea436b43600252407881c12245e39918fac353f2ae62ce72bcdfc5f91dde9e0bff","ssdeep":"384:X2ypm0lLbMErW7iG2ypm0lLbMErGnehZqSPf97xq3fC+GV8WCkY:mWzdbMErW7QWzdbMErGfSP1FefC+GVhY","tlshash":"91b2bf18bf74ad92e1d892385cdad7225311a854479bba927d8c6c1cbbf73e10c39302","first_seen":"2026-10-04T17:27:38.122063Z","last_seen":"2026-10-05T05:52:30.16495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.115Z","timestamp":1791179497115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.14/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 979282\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 24 Aug 2023 16:36:19 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwRGTJTvWnRw7A9ssoQIGK%2F%2BnC5lzX7eT82mwIbzPdxHQrHIr3Jk0PCYMXSfZbmjEoGCIsFsuJ5OFht6uEmUOVWs0rofqUKIBVzN%2FcwEMrnTnOzkEvQ4bjmDh9mr7Aj6%2FoLRqbkG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d11cfc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240033,"size_decoded":29361,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07ced7e527d781115b5a9f3f3f559884","sha1":"371b1a3e8d3453a2451e76320d9d7c0e301331b8","sha256":"dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057","sha512":"a19dda2047af06da26cb446e5a9184fbb87ef5db209368305f4636d5bf28bd29442d05b556540359dc41198218092ce706bf1a7b765e18b3c481c2edd068e10e","ssdeep":"1536:c28Y7SrW3YeWXA1u9w4HCe/l4TEg5fqMEeje378OaiZkW1YO8eQM+yFffwbIcfGc:lvHjahfAG1U2VGDt","tlshash":"b234a7219b03216b612bde6cb6c0ba895f18c323d4725bbbfe95740dc7d34891267a4f","first_seen":"2023-08-28T11:31:40Z","last_seen":"2026-10-05T05:52:30.165479Z","times_seen":1588,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.119Z","timestamp":1791179497119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Oct 2026 05:51:37 GMT\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1176,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-10-05T08:37:03.449437Z","times_seen":81953,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/css/app.4977d7e5.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.124Z","timestamp":1791179497124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /css/app.4977d7e5.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:38 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-1e645\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124485,"size_decoded":26646,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bb3864415f752c8b30e19923db71e945","sha1":"cce5d2cbe5fcf3f42935ecbbb76a6dc9b98e338c","sha256":"49f7eb6580168adcfba5cc98e2e1a73d3b94be9af886dd294d6026ef2a2fe682","sha512":"bb05c0d5044af4e74155a60273281c2b9b4668467b649a89832bb4561758bb0fbef696c4fc8338d09238f1440edf1fe74aed49dcf57be5a0559de26e688b697a","ssdeep":"768:NId3U6o3V+4+6agSMJvSL7IfS0GHGHUjOUZkNxzi6zZyuc48gQ6pVU8eS2A6kiqO:NIK6o3uIfS0AiUjlinziGIW0xmBH7Cz","tlshash":"a4c38797bad9250cd9978a91c59a3efcfdbb191183829cd3e4537bba9f453cb221001c","first_seen":"2026-09-03T14:14:04.692483Z","last_seen":"2026-10-05T05:52:30.166508Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":282,"send":0,"wait":567,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.143Z","timestamp":1791179497143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.4/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 974199\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 03 Aug 2021 11:06:04 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mja6dMfkqiFUdDU7kO48eGUxvob0XoMMyiW0U6yfcPlKL9z1Ue48QIODX674KvTKtpesro%2FP0mvTWqnAakteJPnXl4H0nQdI8BupfRHgRgTmvZo7Q33HPidQmt6kpZqMWqYVVqvm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d030731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":585656,"size_decoded":122706,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"c51f03d35129d9d1a9da65b24cef7fa7","sha1":"1e1d550d978378980dc3aeb60012da86c2355c4b","sha256":"339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c","sha512":"8c83157d1a2d4bacafc89ed01d444551151772f1119272c303ace71aa12b6f1fba29da8c9597e2a9baf670c93768286a405a70186b92ba5aae84554b9123c1eb","ssdeep":"6144:K4lrdS1Vqp5xb+XzxEXdUfM2Z0a54VXTnDBHiSuLx8isMZg07LQi:7vS1Mp5xb+XzxEXufM2DEDVHDub7LQi","tlshash":"04c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2024-03-05T16:56:16Z","last_seen":"2026-10-05T05:52:30.167057Z","times_seen":928,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.147Z","timestamp":1791179497147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.13.2/index.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 676030\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 17 Oct 2023 04:33:30 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHT3Jv%2BFOSxu2m3Sqp2jt5O%2BQtcWpwnuSMMVxkOeZ6l7M5N4KEjeiYn7NYWUz3CBqDza9TLw7M8%2BHl8iB%2B7tsVX48ohlidvL2BmOVNMJ95IPSdlgqCtFSZYGKSNBbHOHCBUnGZ%2Fd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d060731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40107\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146877,"size_decoded":41115,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fba0b10cfa931074254e7531f2cc9373","sha1":"eceff9fb867e11786cbbae234d0c697f0dd445d5","sha256":"7a6dee2202c1dfd3a499f873dee167942e255703859f86107d6bfc2272ea14f0","sha512":"556c2196cc479fd20fb3a1a6ffd6ce4836267b940a2b95bbcb8851d3f3a3e16c7286cbfd9d59ee8eb7ad5e3b58e3ba6d31d4ebe0cd0fd0cc2a30f1deb1ff6ce7","ssdeep":"1536:KC3MhK25tWrWoK3Unrx3WqyrtpqoSWEDZMAfP1rz12VLSV:KcrxmNH9yD3fNfMSV","tlshash":"36e3d52756c0236cb31bcd219bc496c5e224c123f5121bfaf1517a2dcfdbb9612a2b5b","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-10-05T05:52:30.169122Z","times_seen":1063,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/poster/homeList","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.225Z","timestamp":1791179500225,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"POST /api/poster/homeList HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://ebay5678.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://ebay5678.vip\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":841,"size_decoded":721,"mime_type":"application/json","magic":"JSON text data","md5":"39ec741ebb5dcf11a944670b0ecf6cf9","sha1":"e0a925ab198fb46c9c1520a70c8a7e860c4ac85c","sha256":"53f03a7841f2e3cf1028f7c8986f7b4419663bad16cb1c166daecb216a94230d","sha512":"afd09b2e8b0d277d8a1ec93e3dfff0d804073646d5812fbe78f185cde87453a2174cf2f98665d425ae49cbc93af6621ce687f47b01a355b2f0f269a65b97e313","ssdeep":"","tlshash":"55015c2897ebedbab407c1c6111ea68e809c373eadd067545acddb0c45149a36905496","first_seen":"2026-10-04T17:27:38.046298Z","last_seen":"2026-10-05T05:52:30.169761Z","times_seen":3,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/03/119509fae73c4457ad432d209d45582d_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.470Z","timestamp":1791179500470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/03/119509fae73c4457ad432d209d45582d_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 Oct 2026 14:31:06 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106600,"size_decoded":95928,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2026:04:18 14:14:48], progressive, precision 8, 1536x1024, components 3","md5":"8362efa7dd47453cacd9429e28df9a18","sha1":"42566a32a7c8d197248e39f064bd3ee5b8147535","sha256":"2abad41e8ee4685efe0263e89a08dceb733a5e6e2f851f4451b35fbc38b930ec","sha512":"2e14a1b0bc7faff51c47a8338d8c0a1f9ff0a0b18eb1f161e402276a67c23824a2c31b11eb2fa659551483cd3a11255525a1fd7ffe755dddddcf6e8a6bc7bfaf","ssdeep":"3072:KnG62AiGsM6/ukZ6NO8GI6lKfr0xFoSr9F5r:BbFvMrA6pGI6lKfYxFoSP5r","tlshash":"dea3022fa958ad12c6d8d8b48909d713dbd3aa1546f3bb3335eff0413f581664c18ac9","first_seen":"2026-10-04T17:27:38.068388Z","last_seen":"2026-10-05T05:52:30.171621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":142,"send":0,"wait":489,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/cedf1f6d12a8476c87e8845121ef6a96_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.873Z","timestamp":1791179500873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/cedf1f6d12a8476c87e8845121ef6a96_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:06:23 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26026,"size_decoded":16276,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:34:44], progressive, precision 8, 235x300, components 3","md5":"25ff2c6c3a6ba146ce19dbe7639d5947","sha1":"f1599be6c8667c1874fbaa05636b60e415d57bd8","sha256":"c404366a1eec902bd45b5dcefd1e7ac2d25912979cf638b2f3175bcc43f05fc8","sha512":"dbfc584a60feeeb67576bba9b335b99d3e667f1dbc1210d3030dc4a8bf323dc2cca5be4d2eb7119cf633568dceac33cd9bcc0a9b5108ae5e5b72e578ef7ea4c0","ssdeep":"384:Qo4XldkrR7l3nXc5h5n7iPXldkrR7l3nXc5h5cnqJ2cvWgbzUU0qA6g+FyzIdDo3:LOldk1xnXWb7ildk1xnXW4EvH9EhzoE","tlshash":"8bc2af2e7be0ce63fac9a4321046c78363359e4446d39a6ab57d2887bb753f14c38671","first_seen":"2026-10-04T17:27:38.076398Z","last_seen":"2026-10-05T05:52:30.173166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.117Z","timestamp":1791179497117,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:37 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-3b4ee\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242926,"size_decoded":34204,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0005accf931955eec5ed86f897e0d360","sha1":"7ae89839cacb8637600a3b0067fe8611edae2f65","sha256":"277dccf22d817aecf00496f547b3704907d454570f579e5f9d147435de498557","sha512":"121b37b857ea680cc979ad6337a0ecd55bf08cd25db73f7252609c7eee616b62d68da9a906d1d7b692c28901db52af573ca473ea0ee321381a453c1dd46b7c10","ssdeep":"3072:AJW0UArN86OfTq6asxZSfXl3ydsO/NPaa:Dq6Loe","tlshash":"a23477a1a706114b743ac997bdc2e7454a18bee3d0224aedf11758d4f7cdaa42cb3f09","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T05:52:30.174782Z","times_seen":959,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/css/chunk-06ae24a4.fd43ee93.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.084Z","timestamp":1791179499084,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /css/chunk-06ae24a4.fd43ee93.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-bb0e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47886,"size_decoded":4255,"mime_type":"text/css","magic":"ASCII text, with very long lines (46623)","md5":"177ff7e3310c02d7e6a139a3237e0d38","sha1":"375c1fac3912c4b63c01d7bc241aa43ed0055460","sha256":"db079d71523907889a19e611a38e528a3405d89d22506634a177248f03f93226","sha512":"004642aa9fe53920ff46cbaf93784da99051143c22aa04e4e24ce332e2556b057d331a481f31ff427dc0b5ef0cac013c55e41764af8496f59366278918044741","ssdeep":"768:KEkZgRUp2R7p2ROwo1OAPkuD336ya5hrCen0eTg:KEkZYwo1OAPkuD336ya5hrCen0eTg","tlshash":"9223b89a48a1224591234e56cbcc9fa8473cc76364b25cef33967c4bc745bad23ce617","first_seen":"2024-07-02T22:35:06Z","last_seen":"2026-10-05T05:52:30.17539Z","times_seen":865,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/6.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.528Z","timestamp":1791179500528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/6.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-38d3\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14547,"size_decoded":14129,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"567f222c91a0adf2736760e9bd1ebf4e","sha1":"8f8df5a135c97c0b14c0fb5573ca00e822a19e9b","sha256":"cee5b962a078c675d90e9a0f9cefda41478d9a93e80ee69a0131e8931a531aef","sha512":"1155748926bd0d7379a8140f969caf8d6bcb508657c9a3a819501a008c8a114e745ff2f597d400147bf43147c0949f8016868d074781003c54ca66c3826f2d72","ssdeep":"384:6gJn5nsqCGCJs8P63+vOt1PAmO+INCl7SuIo:FJ6aif636FUIND4","tlshash":"c362c1ac36462c11a704fb24ce8414e3a7b314f0d2436ba39dc8dae61d715fa5c956dd","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.175994Z","times_seen":389,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/1790e1c3206745b4a4473d08af79cf61_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.869Z","timestamp":1791179500869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/1790e1c3206745b4a4473d08af79cf61_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:05:02 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48618,"size_decoded":34340,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:33:37], progressive, precision 8, 300x300, components 3","md5":"97f24df262d4cb0782adb014b434c128","sha1":"88abef64a805db3648b3fb9dcae122eaea72d5e5","sha256":"fceb0e956a6f8a545063b2ea1739324d7df6a232997d794d10721b38eb7809af","sha512":"c2521d5209100826f9b849e9619f1fd2e87fd945865d3f813722cac55ad724f2a416d031247bdf152a6d441b7127aa372f5d32bb082551f1a47f11a55b8356ae","ssdeep":"768:2S6NLNwr9yFmnw7bS6NLNwr9yFmnZUPMtVAAInbDfV43Ok280YlsN7gNI:2S4L6KS4L6HOC6n943/FFYgNI","tlshash":"7723d079af49ed61e9c6813e25b8cf058341f7a541a38594b88c2c547fb36e0bc7e253","first_seen":"2026-10-04T17:27:38.07366Z","last_seen":"2026-10-05T05:52:30.176578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/poster_3.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.885Z","timestamp":1791179500885,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/poster_3.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 3921\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-f51\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3921,"size_decoded":4160,"mime_type":"image/png","magic":"PNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced","md5":"d24c58bc85b0a5411d51747cd5daccea","sha1":"ee0c09639b41fc73190dfa3d4b22bcebad71a260","sha256":"32ab3f7c74869f1b10b52b187a99ed56eb862c1cadc4435c11e770a6fb99d594","sha512":"e846b26d4a38e761520346d79c43f4a9db926b59890848dc6df51d6651ecdf9c475b1f9e2e958805b1b6c813ed646dc605cc1c65a41a71ac2f634fffba70e06e","ssdeep":"","tlshash":"b5817d5754978660ff1f104668f8b061a1f0fa6b4d823328885449935e39d6ea9cf9c3","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.178201Z","times_seen":96,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/lib/flexible.js?2222","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.123Z","timestamp":1791179497123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /lib/flexible.js?2222 HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:38 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-fe1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4065,"size_decoded":1617,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1572c9446821f8b1dc1136b64b44e739","sha1":"6a786ef63db48581f50e85601ef4a3effe8bf095","sha256":"264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246","sha512":"4283dbb16b94c7db39673fb92808835e7f2ccb34f64502d0524cd571fb28e91c82abddcbf1224d4b83c1fb30908c96a4d16b604b22ef0f491c2bdf2d00213598","ssdeep":"","tlshash":"5b81322806e322361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-10-05T05:52:30.178912Z","times_seen":966,"resource_available":true,"data":null}},"time_used":1129,"timings":{"blocked":-1,"dns":0,"connect":281,"send":0,"wait":282,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-06ae24a4.686330fb.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.086Z","timestamp":1791179499086,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-81\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129,"size_decoded":397,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"676e3a2df47d8e40c29c2d1a67127eec","sha1":"e54e8144ef939162c151a843933a98ff020a2641","sha256":"6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4","sha512":"4314d28a687dba60202a2a5974ea1b39b02a45a2fea359503396553b4bf9c1eebcc4168357fe2e43875ddd2e61c2af72b926ee6a61bc978fae9474a77de421bb","ssdeep":"","tlshash":"c0b02bbe2804790808bfa0e4300b33d8048301003f711ce507b020902b74e8e4303a4b","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.179918Z","times_seen":944,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/commission/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.223Z","timestamp":1791179500223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/commission/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13692,"size_decoded":3655,"mime_type":"application/json","magic":"JSON text data","md5":"69de013e0be553ffecb42fc78e5f239a","sha1":"2e20617b7c8e88506328f1a9276c519a98584f5f","sha256":"c45b358e90b1c7498091c652f2829b8e328bf2a6ab8cf6fb274dd0fa841f2ee8","sha512":"47073323d045e0dfbb411d123b3cf168a86b3d7837776f87e2886b6b412c5ce304e4acdc9d09a790adbcfe489723f103526f8f7cdf5cab9860793d05ebf02282","ssdeep":"96:e7vKen3bvV5QrupweIAZnjRTNYMyJi+SsCD8jXUn3Ll/TCnerv8wi:e7vdbUuYUNTNYMyw+Xu8zmWnervNi","tlshash":"c75264668b70aef99064ecca0f4f84a38d25b4880cc94f513cd7f0d5afce6267519b96","first_seen":"2026-10-05T05:52:30.180523Z","last_seen":"2026-10-05T05:52:30.180523Z","times_seen":1,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/4.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.526Z","timestamp":1791179500526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/4.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-195f\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6495,"size_decoded":5898,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"f8f831ea05790e70229847bdded8073e","sha1":"10cb798a5a3b8a15f053cf23617f908982dc8651","sha256":"60f0bef1d94953c9a8d6e3ddb33b2ded547e7d5e69a90abddb580bf00ae3d697","sha512":"9ef376f939402c860a63328c057d0e4c818a9eacd6f6c272aa0800c35aa364136d40369c2eb61a76b558646f738fd0b0a507a89e76428442c9c184cf92f11805","ssdeep":"192:PSX6knOHiJNWjegyM6ka35WqlBNVsr79S9p5tYhqctjle:6XJnOHeNuezMsWqUgf7YhqctZe","tlshash":"35d17d07dc4a6d10fb2ae81679e872474ef703d4199768946daa48c6fdf033ecc298c1","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.183168Z","times_seen":354,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/33d551d2386341859ce673359a62da0b_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.868Z","timestamp":1791179500868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/33d551d2386341859ce673359a62da0b_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:04:28 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41860,"size_decoded":28412,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:33:24], progressive, precision 8, 300x278, components 3","md5":"a20647d94347a6a91ab75d9e0a5998e4","sha1":"1d98b1100f48d4c05f6466bad72e21dd540b75be","sha256":"27055176a73432aeae429480526b1d34e36e4df0dd01d2f07f6b08bbe6a49d37","sha512":"5935d170f5d65fd76e3b1af35efc7b966e7bd47624b9c0b44d8aa5936b64de20a0200bc37aa9701513d392e9070442b5ff5be9340544f595d73794d5d6fbc827","ssdeep":"768:5Vbt7AGJLVmxD+bi6uIJ7wVbt7AGJLVmxD+bi6uIhsVBMNDAFVo40fFqFT6ikcdQ:5VRAiB+D8ruI6VRAiB+D8ruIhs+AFyXH","tlshash":"4413df6aa7169eb3f5c003304aebe7a16b11ec985b7bb585bc8c188377f53e16074346","first_seen":"2026-10-04T17:27:38.071878Z","last_seen":"2026-10-05T05:52:30.184855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-dfba482a.deb34a00.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.870Z","timestamp":1791179499870,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /js/chunk-dfba482a.deb34a00.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-73c4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29636,"size_decoded":6266,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29322), with no line terminators","md5":"9afba0a915c4e92fbc11e5c078660203","sha1":"2ed0fa286400a75a06d35fcac18210ec3dbb327e","sha256":"cdfaf433fa8671287cd00eccae2a12ed217572043ebb1e37de7aaac8d7994724","sha512":"a7deed7a53bc8a321fd20890746d45c0d5fec8660eb258ad2c79e8d8bd1e5545d95489df047eb790b658d35441c3891b1e0da154f847c8715f4061eecd16fb60","ssdeep":"384:XaR6aUGUDUPUbPE8ZpljxIfP5htXnp7GZR/6h:XaQdgshpltAp7iK","tlshash":"ecd2a619b9c7f56adc6aa021402f2935e1352ed5a025f081f734cea0a5b9c743b2dfad","first_seen":"2026-10-05T05:52:30.187714Z","last_seen":"2026-10-05T05:52:30.187714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/banner/5/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.222Z","timestamp":1791179500222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/banner/5/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T05:52:30.190724Z","times_seen":5448,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/poster_2.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.883Z","timestamp":1791179500883,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/poster_2.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 2230\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-8b6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2230,"size_decoded":2469,"mime_type":"image/png","magic":"PNG image data, 90 x 89, 8-bit/color RGBA, non-interlaced","md5":"b9aa2bafb22abd29550b9f1902ea932f","sha1":"1a5a9292082a1559e918026ec8cc25352df74528","sha256":"877ba514034aa229ac529fd19dd9fe9e3f1c25c5475a66e03a3faab5c0af0a05","sha512":"f4f40f84fe50c7836e27d403d3d6b0a8955873ba5ef5d587e005b0dd394493edb24c96a1b73e35b5d8d2d1abb98162a0d18bb27f1bbef71aee4dbf06c312dfde","ssdeep":"","tlshash":"70414b838d918f9ee10ad050b680983af279f641796bb3c02246d2379e57276c04fa04","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.191562Z","times_seen":96,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.146Z","timestamp":1791179497146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1406390\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=620alBLh8hgAJc73%2F3oFfozOxl5z8SfIt%2FMXAOQrgAeAlWgUbx3acgcmAE1ghmJs%2BEFEmVlc1Ql2H7AhgMCM3OmlgmNtNjwTpwhhVm7MU6%2BoBRYVUMSYoKDibJHfIj70sbJpmKjG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d050731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":2319,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-10-05T05:52:30.192931Z","times_seen":3689,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/css/chunk-7721dd77.435b277e.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.827Z","timestamp":1791179499827,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /css/chunk-7721dd77.435b277e.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-3342\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13122,"size_decoded":7814,"mime_type":"text/css","magic":"ASCII text, with very long lines (13122), with no line terminators","md5":"afa8c144cb9a731467483205850e245f","sha1":"ba2b45fdaf5dd66d052b9c61fce85ca0ffffe883","sha256":"b3bd51359c248396e2ae630372f5e6dc315c35e7ca4cb9cb305a52f05827551b","sha512":"8d97ecf43e0b92d40330e3638c9c35e69ab5e26d61da26daca6d0747daf2855a739c6c477a3d2a322d4a1d61510d1b76218ef1450bac6e4e8d9b8b9d0e5ae0af","ssdeep":"192:fAJi5ylzEJShKcliZRb7OZBu5qdzWrxb1UMlfB1cH:ft5yS48ZRb7O+kCxbOMr1cH","tlshash":"24423a70bc641cbe333ac5aa315064985e26f453d1e14ea9f41f77a88fd71ca1a26f32","first_seen":"2024-07-02T22:35:07Z","last_seen":"2026-10-05T05:52:30.193539Z","times_seen":716,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/customer/kf.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.212Z","timestamp":1791179500212,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/customer/kf.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 10556\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-293c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10556,"size_decoded":10797,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f7d80a98f6b59aaf05ab54c405bffe89","sha1":"db5cfc26f716a362d10f81633934d9f01c523ae7","sha256":"ab41101111ba6bf6ecb5ef0aa35ae339cb7b2f09517eff9914dd69c65271ee03","sha512":"03bc2ef07c105a6562ba3bce8a0040db8a5f5efba951a12d19bc2d42b3abdb16b1f20ceec2c789ba5614d3ad07e926ebf293edc66ffbaf92b867410085a3bb47","ssdeep":"192:qX/4hute4ReiK/MhLbtUNdZS5eYQOZj9TND1UQBIJg7G5bmVaGal3a:w7e4vKENEZS51N9T3UQsgS54cK","tlshash":"ee22bf736860bb28794b3ca93fc9d55109c5bd24cac3c214956a92617cbaa9037df0d5","first_seen":"2023-05-03T16:46:37Z","last_seen":"2026-10-05T05:52:30.195084Z","times_seen":860,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/grabGoods/page?curPage=1\u0026pageSize=20","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.227Z","timestamp":1791179500227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/grabGoods/page?curPage=1\u0026pageSize=20 HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2882,"size_decoded":943,"mime_type":"application/json","magic":"JSON text data","md5":"609b7dd065c2b934d764e8668b169537","sha1":"ec206c7c4119454a30d3e7daa9ced11394d3e397","sha256":"842490073f2c4db2fb1dc839b2b13e21964d99359c6d027ac81683a0ea17433a","sha512":"22269293e7015e7cea65eda09eddd8e8d28730cb4d0381a3849900d8079bcee19f5145aa9cabeaa301693d54ad11f1dad4bbbe82af43c544bf8db5401685d65c","ssdeep":"","tlshash":"3f5128ce9644f8fdc841811a502fbb8d657ababfd4e06ed87b824b0c0c9e9774b09159","first_seen":"2026-10-05T05:52:30.196092Z","last_seen":"2026-10-05T05:52:30.196092Z","times_seen":1,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/71b0c1ac83e04224bab7a37441336188_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.861Z","timestamp":1791179500861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/71b0c1ac83e04224bab7a37441336188_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:03:11 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16575,"size_decoded":16844,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"f5a2a3aca5bda4151aae61a9bd918f65","sha1":"20d335bb06907822a0b9dadd1e3c3f3398d18a77","sha256":"4904a974e649cd496f771cc8cd5cea1b870fd700b1789c1ef6058ad9041f6d39","sha512":"829e758b2b809d79acb31ec5389e654178c591d000105b5480a9e7f971008f8708a2d61a4c85f6edc444235114e3b04a7cb9124a9048f78d5bf1c23a025cb70b","ssdeep":"384:hTIu9vjzcckGiLptOEtk5cyghzfxmv+3WeYz/E:lr9vjzc7NBkSCv/E","tlshash":"e972d0967133a346ce09c037f9c6a24b9ec060e26549f2ce52d18d772169efd9b91540","first_seen":"2026-10-04T17:27:38.104625Z","last_seen":"2026-10-05T05:52:30.197466Z","times_seen":3,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/7a68d1f6c0f64310ac22f25a9d064b8b_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.867Z","timestamp":1791179500867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/7a68d1f6c0f64310ac22f25a9d064b8b_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:03:59 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15643,"size_decoded":15945,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"87829dc40e7977faf829ff2e2b4b47a4","sha1":"6bea8a32bbc7bf2a0957b702119a3fe9bf6fb1c0","sha256":"a77a40c5667e667571ecafcdfd01055707c89f41931d65dc3cb3d11d0a4b7621","sha512":"6cf23fe1a719efd6e5d87423f526844a9129b289c21f9dd074893f40d22c6f69b3c8728bf5fec655a02354dcfebef9ca38a4f386d3fa883bbf55da6df6ba5c8d","ssdeep":"384:GnW3x+0eZuQ51D8mg9FEJyqzPBo2JIunwIHi4KM:GnKH+2m6ylo26nIC4h","tlshash":"a862cf81b727c30bc169eb341f6500f0011afa453baff64ffac34b81798e6a545b409a","first_seen":"2026-10-04T17:27:38.141783Z","last_seen":"2026-10-05T05:52:30.199113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/5731a46286bc44689935dfbd28ea6b20_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.874Z","timestamp":1791179500874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/5731a46286bc44689935dfbd28ea6b20_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:06:45 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27438,"size_decoded":17372,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:35:32], progressive, precision 8, 300x275, components 3","md5":"d8b89754d49a4356a9ab390996101bab","sha1":"6c93d8c4266056b135010e3cf3880f312f35a079","sha256":"0adcf5f6af801d65eb9d29ab8108a7fb04edaff3ce2654d5428dd54db1d97de8","sha512":"8192b4df1af0aa21ad6df837dbf18d86b11739180bc9b7f2a114bf7d3b164202de7b8fbc76afd671d03619de54bfb460814628ed62aa36555ddfdd6d3c36fb1f","ssdeep":"384:zyj31iN0Q5HpN7iqyj31iN0Q5HpInG/6jt9xFV1ThdWxnem6nRJ:Y31VQ5b7W31VQ5+TVFfdAxem6RJ","tlshash":"57c2af262f418f63f9c5a73894f2da81e2109595a6f31096f88c15513b73ba34e1e357","first_seen":"2026-10-04T17:27:38.147156Z","last_seen":"2026-10-05T05:52:30.200781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.141Z","timestamp":1791179497141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1123820\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3%2B8Bl8bXW%2Feiq1vBh3jpLpb45CwkDQGGLD7UYpvR8%2Fpwv2GBFgfLuPnY9VXuJqRLcS85xtbmDgNrytW8WPVfyCBQCklGSOUSVgpTFDmJrDz6ETLqDvZgXXMr%2F3t08xy8TmZDZ4c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d020731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24822,"size_decoded":8889,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.201403Z","times_seen":1294,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/03/3258b24bd87547cdb5ed4fce2ed1160f_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.474Z","timestamp":1791179500474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/03/3258b24bd87547cdb5ed4fce2ed1160f_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 Oct 2026 14:31:38 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133246,"size_decoded":129210,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 996x695, components 3","md5":"f1b6d3e766eaac7bf8d0d4d45f7bfa70","sha1":"95c6ee28d663758fd50fcd751db770644a6d658a","sha256":"1e22b9ac114d092e525e366fb5cc729a65da2247bba75da41645619c77415985","sha512":"84d3707d4448d7782df6c6e1a3e195e7852483760bbe11fe740e8b0ab24c12f64644935f80f7e429c64e69d67032a1e262177f253f38a36a6fe71d62abde7c01","ssdeep":"3072:4e4TQETw5+zwZME4FyIhXRNz+xyvxJyKPk4X21yhRIo:b0QewkzcME/oXPz+x3KPk4m1yV","tlshash":"ddd3127167c344e9f1ce80b8c166f0932a71e117726792835cdbe64a9ac071abf8f5c6","first_seen":"2026-10-04T17:27:38.128317Z","last_seen":"2026-10-05T05:52:30.202074Z","times_seen":3,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":141,"send":0,"wait":486,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/0a8faec47e294db5a6034706a982c8c5_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.872Z","timestamp":1791179500872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/0a8faec47e294db5a6034706a982c8c5_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:06:06 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14985,"size_decoded":8174,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:34:22], progressive, precision 8, 300x190, components 3","md5":"af2dfabc58178a96bfe02ccf81c1e9e7","sha1":"44c8d335b3fe5892b2ca5ffeb9bb29f825bed115","sha256":"acc40cacd12a4103a2a8c92dee545f144574f582f8e0b0a4eca7ac163f079a4d","sha512":"a200af51827db7ddc3b1c51dd097da3d5c7ae3f2c715487b2f5bd514bf06863d3bb0fc54b8e5070bdea46b69ec414e2335113d042afc787f666ae5e4f282dc7a","ssdeep":"192:FCXIp3PrQy4lzvMCXIp3IknVCPqM4wqDlLRtCYWWVPNj6u:AoD7i1oTnVCPUNU9WV1Gu","tlshash":"3d626c3bab149d11f4e4253964b1dbc3ab26ec8569a3be81746c7d527f30b50896c283","first_seen":"2026-10-04T17:27:38.040453Z","last_seen":"2026-10-05T05:52:30.204385Z","times_seen":3,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/lib/flexible.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.121Z","timestamp":1791179497121,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:37 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-408\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1032,"size_decoded":839,"mime_type":"text/css","magic":"ASCII text","md5":"7524a2ba32138a0363ad48a78f4c7b9a","sha1":"aab46e82603b9de5b1880c0aaddc0d0f29dbf7a6","sha256":"d68ca73f7b227d0da6b310867a0a588530657bc433fce241b3b2aea1502c10c6","sha512":"77518eea3846fafd71ba1a086f06975e9ab22c2d1e55265795f62604d2411eec3a9a9ce50e6f5ce369fad4ad22e4346fb4547beae00e043fd7f48b5b21e9c252","ssdeep":"","tlshash":"081175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T05:52:30.209548Z","times_seen":941,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":299,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/websocket/server/info?t=1791179499114","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.116Z","timestamp":1791179499116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/websocket/server/info?t=1791179499114 HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76,"size_decoded":449,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77ded8f29d2f80eef16d37206e78b9f7","sha1":"dea4b1e6f646fb74f0491c24cfb3c3fb2d5b7a97","sha256":"5600c3cad1e81d7d1d54e47bf8761a1a65de081274ab3c5a08d8075f6bff376e","sha512":"cb11bdad0029f054c1f1f63d2bcdf367642e1c380aa10614b824fbd45ac1c14af5977a8a38ab16894a91cf57e956fdfe768ab2135b90c266a10e4060cb88041c","ssdeep":"","tlshash":"bca0121aa42d202884481b0122092d12581804b7010150e42118261401d1422152058b","first_seen":"2026-10-05T05:52:30.210292Z","last_seen":"2026-10-05T05:52:30.210292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/userLevel/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.224Z","timestamp":1791179500224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/userLevel/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2068,"size_decoded":635,"mime_type":"application/json","magic":"JSON text data","md5":"e93242ebfeab42ce0a3d065e4e76b1e3","sha1":"92ad3ed87cd6a1ea28cdc4aca4a05f3c8c844b7a","sha256":"7046f19602fdedd1ab3665fd665e02a8be16a725e624a14da4e18a0eadcb2fcd","sha512":"1e179fd62ee035d0f0ce79171283262ff299addffd76c4b7bb553463480c61012722cbbbcd2082d310592d79a528435e91169c216ec5ca355d6814d09dc9b1cc","ssdeep":"","tlshash":"c241fbd5982a01d7caa67d900f6b738265fcf3ef68d08c0504d79c16cf1b9b2544af12","first_seen":"2026-10-04T17:27:38.044271Z","last_seen":"2026-10-05T05:52:30.213597Z","times_seen":3,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/03/0b761b3cc16548c2aa9ff20d4156300d_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.472Z","timestamp":1791179500472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/03/0b761b3cc16548c2aa9ff20d4156300d_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 Oct 2026 14:31:21 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131119,"size_decoded":128499,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 996x695, components 3","md5":"f2fe3c8fd909098d036160fdbe297cf4","sha1":"1e1b62cf332b47d5329e8f12a574680fbeac128d","sha256":"b38fb5e50d1ee101d96fee2067b8fcc5a6927cc47ee4d9dff0640e76ba875fde","sha512":"46b8c7d4f11d072b1a9c97b0ab7e76e5c8021f03a0f7d6ae5cb76b3834bc5d708b0076bae65ec88227efe5382a76bf27b81da26240e8997f290889dc094f8937","ssdeep":"3072:41xacu4g/a0NYpVskxWyghFCSoFoOvaYZEH9+:G5yS0Cppx1ACSo5v0U","tlshash":"44d31232d8721e78f88cf2be5090e4adfd57185897764ba2964b821fe6d05f48f341b4","first_seen":"2026-10-04T17:27:38.035601Z","last_seen":"2026-10-05T05:52:30.217784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":143,"send":0,"wait":485,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.134Z","timestamp":1791179497134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 974407\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Fil5Kpe9frT5sZMcVnvkPA6CCWdukqmzu0ABMUMwhmk1MaP%2FYZGJamzIQH6BxCnrFC2u6BPdGXj6a6qf21XMuSdSMgr4U7OrRMJ9zM0MBdU3pWm24%2FoUrAEdpe288QEkb8OLmWR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d11cfe0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30769\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93675,"size_decoded":31787,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-05T05:52:30.219171Z","times_seen":4806,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.136Z","timestamp":1791179497136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1119991\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBLHtGK7saXYa520ct%2B51qEricUtgOPVae7qFc%2BnjZvAAAw3z6kzhwK64ecf8TF6zi95oTMzNXnZmo7Pu5aljViqIhYNXlqNOpXFTWEGZl2Q1ejBAhl95wCtB0fe%2BYwLxWlzCtTz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d11cff0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13638,"size_decoded":5231,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.2198Z","times_seen":1298,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.144Z","timestamp":1791179497144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 979619\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msI5NlEfAHf55M3dWChlBRY0Zy0xAluy50meL37EMXlKhXe%2F72rVlbE0csV1Y3BTaMpYHdxVvr9h9tSX2VFzqJWyw76KK5swmPeDSt6e9WSZoRFNj65yVkfRmKbPXrz1cLYCxJmo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d040731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28993\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128745,"size_decoded":30007,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-05T05:52:30.224087Z","times_seen":2602,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/567b27394ce54734b6eb5c07e8638b16_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.855Z","timestamp":1791179500855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/567b27394ce54734b6eb5c07e8638b16_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 08:47:45 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27834,"size_decoded":17713,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:32:55], progressive, precision 8, 298x300, components 3","md5":"28ebbc64223f58b20ad11255d4cbb53d","sha1":"f26008cbc02e77caa55c37f0e81a6266226ddb33","sha256":"fcf58aeb53e51fae790e59e9b133ae21c60d0a79951bdb4c3eea8486f9ffe03e","sha512":"92f7f84b01d357a64aa94226012c82b9c43e5bf41c496d1e68f74defb30ad9e992c245bf2863f758159b9dc445ded21ca38c2be0b03f92af01232d2a94486c75","ssdeep":"384:5WDI04kmx7iLWDI04kmXnevA7M3EVgUThxiUi0Ggi7HgwASL:UDxje7hDxjO6A77VgKhxvici7HzASL","tlshash":"63c29e28bfc48db3fcd472b528b6ca3797362c0816939256f69c38a577f07e15c56222","first_seen":"2026-10-04T17:27:38.101349Z","last_seen":"2026-10-05T05:52:30.225889Z","times_seen":3,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/5.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.527Z","timestamp":1791179500527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/5.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-13977\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80247,"size_decoded":79901,"mime_type":"image/png","magic":"PNG image data, 1280 x 787, 8-bit colormap, non-interlaced","md5":"af912194c0220ac8509ef46e55f12d0e","sha1":"cd38228a5fb07c66972682299373defedb825281","sha256":"d55a75cd237e29955dcaefcb734cfb17a07a9e1046e8b049458070d726b5a076","sha512":"667efd70bc771754effc1fb9c6db95bca5352e9ab3c81cfbc9d38f101ea335592a5da98f78cc08f787dbd8e49789c7b25dcf1edbb0f529e05c26cb7638aef1ac","ssdeep":"1536:6O6hpb3eZ5fb8UEfnCYVtm0ipqX/mye7BmiYCHcSAlk5ak8SvycLwL3DlTF:spb34D5wDMqX/k8ilHdAlkuSvt0r","tlshash":"5773029327b43804d55abbb97a0b481098173b7307c189dff2671ed6ea6346ff4e0289","first_seen":"2023-06-13T01:19:11Z","last_seen":"2026-10-05T05:52:30.229903Z","times_seen":344,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-vendors.42f07336.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.128Z","timestamp":1791179497128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /js/chunk-vendors.42f07336.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-10000\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65536,"size_decoded":19014,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29775)","md5":"bdaaed4e9e1d5e0322ea968e6f47ac0c","sha1":"85c58af8151ed5badcdca952295e8c6e7b3e1e15","sha256":"c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8","sha512":"e23c153981e588a4d6b99c8341da319ce7e9bb16036ff952a8a469910640505b6e7ee7bb9e6d06dc59082f537053bb46cc8d800b82de8a730abee7d743bf03d5","ssdeep":"1536:qJuH03+0goh0dbU2Q+39Ya7C5x+eccVdofh3q4A6R:qJuU3bCbU2Q+3MXccgpE6R","tlshash":"0553e788f2d5b070439771a8402f610bf37ae959b44d8498f625e8e1bdb8dce546bf38","first_seen":"2024-04-24T18:56:38Z","last_seen":"2026-10-05T05:52:30.230598Z","times_seen":909,"resource_available":true,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":225,"send":0,"wait":459,"receive":0,"ssl":454},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.140Z","timestamp":1791179497140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1123383\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p60Oh60AE%2B28kr9VhGsFVCjMkvI6Y845mBBWIZdCw0qFMEEepEWAMVvzQuoLIDRGsQ%2FOsKI4GxSztI%2FIl%2FTnLXgWzEMEgWW1g5PznEdDCznm027cfJQ%2FBxecZ5IXhYSjlGOour5f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d12d010731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22805,"size_decoded":7223,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.235689Z","times_seen":1272,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/loading.png?2222","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:38.595Z","timestamp":1791179498595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /loading.png?2222 HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/css/app.4977d7e5.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:38 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]}],"data":{"size":13531,"size_decoded":3189,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"5d2573f0b19717b0ba0e949182fe3ad3","sha1":"d32efb943ac503246051ea0337ee7eb825c34620","sha256":"cfb460322202b05283fe364dab1a5c00b4512378a708964e2eaa1c3bbbb0c869","sha512":"0c9e10699e585ed30ad97ae916dfc5963cbd81b0022f1b4b491c2cfe865a8ef64f5d4e3eeec437d8ebf85d7879c29a56a2d3b5f8c270295079da5ff33f1b865e","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/v0vr3sI7432OzgiAQntyztM/Z0tYn+ahaOa0acaiC:vOZUy523yQntyztM/Z0tYA","tlshash":"55524d79d600619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8c5f8f78fd40627483","first_seen":"2026-10-05T05:52:30.236393Z","last_seen":"2026-10-05T05:52:30.236393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ebay5678.vip/api/websocket/server/481/anhgmywf/websocket","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.412Z","timestamp":1791179499412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/websocket/server/481/anhgmywf/websocket HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ebay5678.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5jMwpqxPeWcxGGxKjLpBpQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nConnection: upgrade\r\nOrigin: https://ebay5678.vip\r\nUpgrade: WebSocket\r\nSec-WebSocket-Accept: eP//gONP1qzUwGJLDTIDtTehef8=\r\nAccess-Control-Allow-Origin: https://ebay5678.vip\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nSec-WebSocket-Location: ws://ebay5678.vip/websocket/server//481/anhgmywf/websocket\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":470,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-05T08:26:03.020907Z","times_seen":18852476,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":0,"dns":0,"connect":227,"send":0,"wait":229,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/ic_withdraw.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.216Z","timestamp":1791179500216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/ic_withdraw.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 5218\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-1462\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5218,"size_decoded":5458,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"9a75fc569b8f4ecea7026516d4b5dd52","sha1":"516f53b7cc6839eedd60da4a1a11473ab4260c4e","sha256":"69a67733a115e7d5eb1207a708519d220e39badd1b105968e7f4c47312294a43","sha512":"7164fe4d05f53be1c450ba2f3a7328d8878c059b323e153159137dc3af10706daf73a289a47ea8811832c426fea27a5700b4ff2bcd452e5cec568b6f285e1832","ssdeep":"96:bSMllcHitlIxv9vk7C1+I4wWHLihk/xL7s1EYyoNMsU94s7NInuhc7FZNLqN:bSHIIHUCD4waxg14oVU94xLZNg","tlshash":"68b1a08870084669558a457b70d3bc0d4e1d66c452a23e0c9f5d013fda69d107ce4f4d","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.238676Z","times_seen":120,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/poster_4.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.886Z","timestamp":1791179500886,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/poster_4.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 3447\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-d77\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3447,"size_decoded":3686,"mime_type":"image/png","magic":"PNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced","md5":"5441638661394e5ad0699db2a4413aa7","sha1":"cb94f2f8cbe10d853d136028c7cbd865f6d35ba5","sha256":"302b569abf09483d97e3d8034b804d82fdc191488ce8f5413e6af655e15be89b","sha512":"7d2c019fa5cd9ab6616737c32d3855a4ea33732a218253cc9c08b2dc19f23e92b896d0bb0441dfb2eec06339b5d70c58961969da10e7b418632bc7faf07f3ef7","ssdeep":"","tlshash":"99616beef40ca936258737698472c4fbd8c6fd12104f6ec99301e19a5c65c169234f7e","first_seen":"2023-05-03T16:46:37Z","last_seen":"2026-10-05T05:52:30.240308Z","times_seen":38,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/js/chunk-7721dd77.0e3d8694.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.828Z","timestamp":1791179499828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /js/chunk-7721dd77.0e3d8694.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-68\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104,"size_decoded":388,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"50a232a7a5154e825f186f95acf29aee","sha1":"802fa9205750afec336d36539e1a913906088396","sha256":"ea9c81db3bf4e708fccee76f211080e15889d6a7efb7134d71e6d728fc0ec5b1","sha512":"3f33f5039d50c9086497763f636dbcca0652a04b23a43337400784b9774a56b6f87bc59100b119d45fca2663fdb7ad9240957851aeece61f177420eabed8eed0","ssdeep":"","tlshash":"fab0127d3440b41604bfe4d6115b33f63c5f01042f7218f40b6500743e65acb490568b","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.240938Z","times_seen":818,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/cfg/202610/03/12586d6eee1245e8abdb15ae3933abbd_.ico","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.155Z","timestamp":1791179500155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/cfg/202610/03/12586d6eee1245e8abdb15ae3933abbd_.ico HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 03 Oct 2026 14:30:42 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":10030,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"89e199dde523b91e740083c4c8db4f13","sha1":"77f7f40e8bba29930f81bcd9dfbde8e16e86fe77","sha256":"8b4c9021260976ce74fa6c11111899311e7a4911ace7fe55ddd76cc4ab9f1db9","sha512":"9ebd3bd4282b0baa096cfd83365445178f8f6314067b05d04ff244e1255aa870e1b5f30763ebdc5e69e116fde4b2cd93e342781aca48fe7b95e0fc02e2889bb8","ssdeep":"48:9oQnnn0PSS8NzPNwfr7nsWYGu2y0BwT0HSJYjMnqWM2Cdh1M7CI3H5b2NGFtFRKD:9GHxICIdW7uzq","tlshash":"2412376aa208bc00d7da4f3cc77958ff924a4940db3d2057f0e2715eadad1be4492a8d","first_seen":"2023-05-08T21:03:54Z","last_seen":"2026-10-05T05:52:30.161795Z","times_seen":478,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":94,"connect":141,"send":0,"wait":147,"receive":140,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/ic_invite.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.218Z","timestamp":1791179500218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/ic_invite.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 3173\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-c65\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3173,"size_decoded":3412,"mime_type":"image/png","magic":"PNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced","md5":"d73ff53d803db37cbab27a5ebc1d26d3","sha1":"b00816d9b06adffbdaa0273e2925190df5eb964d","sha256":"18b8a075156603bc63109ed5488517007e71285a75e7c27b800f8a4fb08e3856","sha512":"7ed46f20a49cfdea5cfd8692a7c5306f0803e83efea00d90e35e5b376799046af9e27198aeab5dc19c9617d500ee5582707458762782372e164256e6f2236930","ssdeep":"","tlshash":"f6612cc67d503abd19b6dc6061780eddeb92b0dfd90a0944058b17711704b549e3d1d9","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.242649Z","times_seen":76,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/telegram.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.220Z","timestamp":1791179500220,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/telegram.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 46504\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-b5a8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46504,"size_decoded":46745,"mime_type":"image/png","magic":"PNG image data, 297 x 295, 8-bit/color RGBA, non-interlaced","md5":"35b1ac5b6527acf955bcae441926c007","sha1":"bf5fdfdd86c9c91895b33344e4374284a0df216f","sha256":"f523795cc9dc8c0d02117deb5b0515f3815a7a8d577e930a38885509333035c4","sha512":"dc4334cc665b02ed872a84f42c9288a7975e613cd1ccf6d7f71810ab3ae5245cc41c556d1681992a28b7fa63310ff7df6d1df6a09f8ffd5d29ae865fecf6614a","ssdeep":"768:ziz24gZZPeAjJB3Ru4ZOyAJN61wGVJcujP2IVRA5Mbb6+tfPOiqJpr6WxOgxIjue:4JQljJvu4TmGV2w3VRh/6+y5/OgGju2f","tlshash":"4a2302c9d7d218c0d00e19b0a7b37c4a1d0941f1b6c87baf719d8e15eb268bdd19e1b1","first_seen":"2023-06-28T14:32:33Z","last_seen":"2026-10-05T05:52:30.244249Z","times_seen":23,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/static/mobile/home/poster_1.png","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.881Z","timestamp":1791179500881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /static/mobile/home/poster_1.png HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 3557\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nConnection: keep-alive\r\nETag: \"6ac330fb-de5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3557,"size_decoded":3796,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"1d887f6301dad442c92809a30aa8a13f","sha1":"9e52ac9c02e6d8caeb490469cb977d9335486ef1","sha256":"7964f1ef06e267a42833e31402676b5b52227c2a5f5473d017c45f2047b9e656","sha512":"69adc226331d4c91b049587ac4fa8472c1257d8aad2c65332a1f3933f10765181f3d085fcc29cfa9e24c8ff8667621e88092c7365850b45105f3361e9d61cc9d","ssdeep":"","tlshash":"61716d10a3088a71bcda05ede5449732d03b99562300f834987fbacc8191bcf62ef7a1","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.245751Z","times_seen":96,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-05T05:51:35.410Z","timestamp":1791179495410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:36 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":13531,"size_decoded":3189,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"5d2573f0b19717b0ba0e949182fe3ad3","sha1":"d32efb943ac503246051ea0337ee7eb825c34620","sha256":"cfb460322202b05283fe364dab1a5c00b4512378a708964e2eaa1c3bbbb0c869","sha512":"0c9e10699e585ed30ad97ae916dfc5963cbd81b0022f1b4b491c2cfe865a8ef64f5d4e3eeec437d8ebf85d7879c29a56a2d3b5f8c270295079da5ff33f1b865e","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/v0vr3sI7432OzgiAQntyztM/Z0tYn+ahaOa0acaiC:vOZUy523yQntyztM/Z0tYA","tlshash":"55524d79d600619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8c5f8f78fd40627483","first_seen":"2026-10-05T05:52:30.236393Z","last_seen":"2026-10-05T05:52:30.236393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1305,"timings":{"blocked":0,"dns":106,"connect":228,"send":0,"wait":229,"receive":0,"ssl":742},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/lib/jquery-1.11.2.min.js","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.129Z","timestamp":1791179497129,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:37 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-1787e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96382,"size_decoded":33746,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T05:52:30.246485Z","times_seen":1992,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":437,"dns":0,"connect":0,"send":0,"wait":242,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/common/dictEnumMapAll","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.092Z","timestamp":1791179499092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"POST /api/common/dictEnumMapAll HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://ebay5678.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://ebay5678.vip\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10038,"size_decoded":4558,"mime_type":"application/json","magic":"JSON text data","md5":"4418710a8383757926d94e4fb96be82a","sha1":"5470ea6aa053525dadd25897190ab82f1db31431","sha256":"4b349d5f6ec07ec4a4f25a77d1ed6ed0df421b5e79a4fd961f1d0875f89ed21a","sha512":"6fe0b6ef96dce2b182e5a819e85809436f7766f2def475fc5fd5b31a78ac5b73a6d7651cfc44435c1fc0d69b151f63a98cfee0ba44cc43b705549ca9b73ee3e8","ssdeep":"192:e2Y1Ys18Funrd14tD6NDAf0262EQEZVCNR1INsRU5DxEyA:ePrdeD6mf0262EQEZVCH1wBxEyA","tlshash":"cd22e7c4b74cadb08c02955295933c2936701bdeb11d8250aae5fe8db44c717772bbfa","first_seen":"2026-10-05T05:52:30.253278Z","last_seen":"2026-10-05T05:52:30.253278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/translation/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.352Z","timestamp":1791179499352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/translation/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T05:52:30.190724Z","times_seen":5448,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/banner/1/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.219Z","timestamp":1791179500219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/banner/1/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714,"size_decoded":558,"mime_type":"application/json","magic":"JSON text data","md5":"9184aebb4b3ca2c7b384ac5179f6ff62","sha1":"cafbad566175c78ee4c1f8e46b21b1de4ec23bab","sha256":"0ab372b54707bae8f030ebee86eee87d5755d5d183894aeffc3a4a2b30c3a1e4","sha512":"1d130f0ce5cb3c585b7c936c3f2233dbd072dc999b56c1e7a17f0eea2725104c19cb7737cf06e10cbbfed00ea139a820b47cf10de0c22f6f66aa505763dd4109","ssdeep":"","tlshash":"8f019c14e16af8bf88438143819facc951ac367ec484ab983781cb1c4c8d87bb61e4e6","first_seen":"2026-10-04T17:27:38.145196Z","last_seen":"2026-10-05T05:52:30.258193Z","times_seen":3,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/country/list","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.094Z","timestamp":1791179499094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":325,"size_decoded":486,"mime_type":"application/json","magic":"JSON text data","md5":"59394b14b2ab9692fb0a3721d3169584","sha1":"3ded1670f88ae8a76f1df1096ea3180c2f8f6549","sha256":"c314894fe200822038e038295d04a1f3e1c4e92089cef9c611eec39bf3de4927","sha512":"808c8437a9c32f666bbce265428f888a8ce2382b0eaf94a0e03cd3a91b1b4a9a8bbf4c02fa53592fed65592d4f6fb14f383257a7c25600dcb68bb21ce439bebe","ssdeep":"","tlshash":"e7e026ad250cacfeec61c011110e7b2e7cbe70a8e8ca1c5052cd4b2842c78b20209822","first_seen":"2026-10-04T17:27:38.084644Z","last_seen":"2026-10-05T05:52:30.260036Z","times_seen":3,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/poster/notice","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.216Z","timestamp":1791179500216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T05:52:30.190724Z","times_seen":5448,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/static/mobile/link/2.png","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.523Z","timestamp":1791179500523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /static/mobile/link/2.png HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 01 Oct 2026 09:29:30 GMT\r\netag: W/\"6abe27fa-8df6\"\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36342,"size_decoded":35915,"mime_type":"image/png","magic":"PNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced","md5":"ff2583db35c4acd87cbf195af9e9b202","sha1":"accfcd83b3d9f5de5aefe233ab1add6f800486c4","sha256":"8ce9d693209b66c96c19a29f83c57bf0389d81fc8e5ce4dcea63a4cc2c821928","sha512":"a5c52846621635a06e1ba79aaac03280f0c1ac38a51430b833afe536657eee5f703c432fbd23f5a8f82a4e47bf4e4aa21449ec597c8686e19c962d8c0d3d8060","ssdeep":"768:RJfYhYn07EF8k04B5h2FBHS/6W9tvQpxzP+QwV8QSciig7ETgzbCU:HfeeqRAUFBHSiMt4zD+QwaQSz4Cd","tlshash":"b9f2f1f1d0039a1166296b56eca2dcf3253a0c95807325fe1490c56f26ed1f9f17af8e","first_seen":"2023-05-02T09:51:09Z","last_seen":"2026-10-05T05:52:30.261477Z","times_seen":397,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiuqt.amazonoom-online.com/api/file/banner/202610/01/62b140003ef348d89fb46d30a7fcdfb5_.jpg","fqdn":"aiuqt.amazonoom-online.com","domain":"amazonoom-online.com","tld":"com"},"ip":{"addr":"103.24.217.68","port":443,"asn":51847,"as":"Nearoute Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:40.870Z","timestamp":1791179500870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amazonoom-online.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 15:39:59 GMT","end":"Sat, 02 Jan 2027 15:39:58 GMT"},"fingerprint":{"sha1":"A8:63:FF:CD:E2:DC:9A:1A:1B:EE:2B:1C:3B:60:4D:84:B5:04:3E:F8","sha256":"B6:E2:99:D2:91:25:01:74:E4:45:F5:B6:83:C2:F1:52:A8:31:AB:1F:AA:31:6A:C4:A3:29:38:C2:00:44:9F:4E"}}},"request":{"raw":"GET /api/file/banner/202610/01/62b140003ef348d89fb46d30a7fcdfb5_.jpg HTTP/1.1\r\nHost: aiuqt.amazonoom-online.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 05 Oct 2026 05:51:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 01 Oct 2026 09:05:48 GMT\r\nexpires: Wed, 04 Nov 2026 05:51:40 GMT\r\ncache-control: max-age=2592000\r\nx-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43512,"size_decoded":29913,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.2 (20231018.m.2368 97b8cf1)  (Windows), datetime=2025:11:18 01:33:54], progressive, precision 8, 300x296, components 3","md5":"4ae38cc2d95b87abf34815db44f2a905","sha1":"182734e88a4107fc656efe6ef619afe4e8bcfaa2","sha256":"d7e521e95a62202b78036ca595e8bae3f0aeda8d5cc4f80585dd2155aa166805","sha512":"b688d094632f2d66581d13876b01a6dc42e170c3e702efdf7639428242ef6ee2589b4686390c6e6f85871f3c5940dbcc969f40fb99fd314e5814a7cb322ebead","ssdeep":"768:XfXwu+30M2ev7ZfXwu+30M2eFY0Ntdt2j6U7G7QQd:P1MrN1MrFr52jN7ad","tlshash":"2c13d00de7a0ada3eec1b1358969d25a81205ee69d973f47350c2cd23b7a7c0ef68147","first_seen":"2026-10-04T17:27:38.064456Z","last_seen":"2026-10-05T05:52:30.270305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:37.149Z","timestamp":1791179497149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.13.2/vant.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 05:51:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 17 Oct 2023 04:33:30 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLygm1MSBtZiMYexs2LPcLh8el7UQW5Ot8XFK%2FI9sm8T%2B7WxIrIAK%2FIlqWMQtKU3c37K%2FB5DULTSRRF8rzBymbTssoi55K2LGRCWXkB3ZkbBe0tfSYDaU5yPCJ%2FarPoNmKCR%2Bg9k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a45a27d13d070731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279653,"size_decoded":68911,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57301)","md5":"644f13180f8d398c886f534b07044cdd","sha1":"2d3349d384b50a385ed0b0d84a256be60a1e2201","sha256":"f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6","sha512":"700886a3c2a288eeadeec4b09884566eecb30f2530259b18a45147f07a02103fb94e144ed643f690de26e8b76119aa639f210c0d687cc957c82318be053ec72a","ssdeep":"3072:XuhzovpPNdJ+fzFgMxnnocXJjyv7mF4Betr1G661LlS+b6aNSnIum/yXN:+hzopC0TmRQBPSWyd","tlshash":"0b54d78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2024-04-24T18:56:37Z","last_seen":"2026-10-05T05:52:30.272348Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/favicon.ico","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.504Z","timestamp":1791179499504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-34db\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":13531,"size_decoded":3189,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8780)","md5":"5d2573f0b19717b0ba0e949182fe3ad3","sha1":"d32efb943ac503246051ea0337ee7eb825c34620","sha256":"cfb460322202b05283fe364dab1a5c00b4512378a708964e2eaa1c3bbbb0c869","sha512":"0c9e10699e585ed30ad97ae916dfc5963cbd81b0022f1b4b491c2cfe865a8ef64f5d4e3eeec437d8ebf85d7879c29a56a2d3b5f8c270295079da5ff33f1b865e","ssdeep":"192:vsNZeKIC+LFGSFGmQnqQnI/v0vr3sI7432OzgiAQntyztM/Z0tYn+ahaOa0acaiC:vOZUy523yQntyztM/Z0tYA","tlshash":"55524d79d600619fa9e1dd9b9e29f729c4eb8c7a2070e440b66d8c5f8f78fd40627483","first_seen":"2026-10-05T05:52:30.236393Z","last_seen":"2026-10-05T05:52:30.236393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/api/common/dict/allMap","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.587Z","timestamp":1791179499587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://ebay5678.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:39 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://ebay5678.vip\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12298,"size_decoded":5194,"mime_type":"application/json","magic":"JSON text data","md5":"b340aeb6720256d0a91436eb92606a73","sha1":"9d3e273e6d682c135f778e17ca37f6cdf1ef7bc2","sha256":"cf4cb62f15faf2560456831ed9b8413eb7678413b1936b2d1f3db11d697987f0","sha512":"aa4d4b1ed0bf38b71e6a5568a30e14a00bc3a4fe39e16ae26d7967c722e74572638a0fd8416eb48a220e7b77e40822d58328acef2e0e18d6b7025fb7f7eeefab","ssdeep":"384:atdX45mN3SRoHJMrXuLDdKMEjQa2GdYnvMgm1T2OOQQGrMA7:aUHuOHYk3w+","tlshash":"74421ccce643a8f99c03bc1152e8645c146e2f765e8dc6445d96748c30fc386be3abae","first_seen":"2026-10-05T05:52:30.292039Z","last_seen":"2026-10-05T05:52:30.292039Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ebay5678.vip/css/chunk-dfba482a.8401352a.css","fqdn":"ebay5678.vip","domain":"ebay5678.vip","tld":"vip"},"ip":{"addr":"112.121.179.148","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ebay5678.vip/","date":"2026-10-05T05:51:39.868Z","timestamp":1791179499868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ebay5678.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:43:55 GMT","end":"Thu, 31 Dec 2026 07:43:54 GMT"},"fingerprint":{"sha1":"90:5B:2D:1B:BB:D0:4A:3F:27:A7:20:1F:0E:09:AA:A4:2F:3A:F2:0D","sha256":"F4:B7:6E:47:D1:16:BD:E4:C2:5D:16:3C:CA:35:ED:5F:B5:89:1D:6D:80:EC:F1:12:09:00:E1:89:C7:92:0E:CF"}}},"request":{"raw":"GET /css/chunk-dfba482a.8401352a.css HTTP/1.1\r\nHost: ebay5678.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ebay5678.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Mon, 05 Oct 2026 05:51:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 05 Oct 2026 05:09:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac330fb-1562\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5474,"size_decoded":1484,"mime_type":"text/css","magic":"ASCII text, with very long lines (5474), with no line terminators","md5":"f79fda72ff200b11f2da0cad60abdc09","sha1":"fbbe65715d4c2ad04e40c500741359d59d3de11b","sha256":"9ac17e77ad7a236a861c5f5e85c68cf85eedac996602d01acce33ce132855f67","sha512":"218703fd959698b110d47b70bf5cc5fcbcd4aafdb111508fa8725654dca8eb3a67e92711fdde1a9017e8e18d815c3d7351a8f1f17304db863d4f04146ab2046b","ssdeep":"96:CKLWYrYc/1Mk8Jl3kl3+l3veKbWP1cH0LFOl3G3j3BwVl3Fi/hkG7fA8:CKLDek8JlUlOl/eKbI+0LFOlWzKlK5","tlshash":"0fb13233755c5318f13bd8d1a55529e68248fe17e15247eaec962e30dfc39832fa124e","first_seen":"2026-10-05T05:52:30.295957Z","last_seen":"2026-10-05T05:52:30.295957Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"ebay5678.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"ebay5678.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}