{"report_id":"a95f38b2-3c49-4ef7-884e-776d4900ceb8","version":6,"status":"done","tags":[],"date":"2026-04-26T02:56:33Z","url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"title":"z6mg·人生就是博(中国区)有限公司官网","dom":{"size":4989,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1397)","md5":"fc93b6a220aa3504a3da6cdaa6ebf5de","sha1":"ce7e8f6e9b9b589b1c8c0affeb3d166bc0f36262","sha256":"e796f56aecfb299c4cae68ce26cf245bd64d41b77680d0ad738a7cce602abbbc","sha512":"f73ea69436015bbd2dcd50c0afea7391f7bc492382b992c18afbb17c770678bd492e31552b80bd5dfae2b019bf688ca6a762154394160573563983e7bf0e10f1","ssdeep":"96:EePUlota1O1KIs8HV5kWRG9tNihPpST9xB6tKWJiMpErC3HOK:EEQ1OKIsSjG9vnyKWJiMpqC3uK","tlshash":"5aa1c7375835e03202732994f7b2f21c6073961fe92adc91fbed42d80fe0f988946629","dom_hash":"domhashe18bd770135b53fd0bd7c0eb9ff3efa8","first_seen":"2026-04-24T10:02:49.267239Z","last_seen":"2026-05-06T11:28:11.651088Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-31T02:56:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.shoujunffm.com","ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2018-12-14","domain_rank":0,"first_seen":"2026-04-26T02:56:37.446154Z","last_seen":"2026-04-26T02:56:37.446154Z","alert_count":156,"request_count":52,"received_data":3382709,"sent_data":21633,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"34.92.231.9","ip":{"addr":"34.92.231.9","port":39016,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":296,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static-ud.udesk.cn","ip":{"addr":"163.181.243.184","port":80,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2012-12-18","domain_rank":1956064,"first_seen":"2019-03-30T22:05:21Z","last_seen":"2026-04-24T10:02:37.662972Z","alert_count":0,"request_count":1,"received_data":1384,"sent_data":368,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"1811089.s4.udesk.cn","ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-12-18","domain_rank":0,"first_seen":"2025-04-19T17:22:05.582611Z","last_seen":"2026-04-24T10:02:38.334986Z","alert_count":0,"request_count":7,"received_data":50507,"sent_data":4116,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-ud.s4.udesk.cn","ip":{"addr":"101.227.20.91","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"domain_registered":"2012-12-18","domain_rank":0,"first_seen":"2022-09-07T14:20:10Z","last_seen":"2026-04-24T10:02:37.398018Z","alert_count":0,"request_count":3,"received_data":1735742,"sent_data":1398,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-20T04:50:00.504523Z","alert_count":0,"request_count":4,"received_data":31258,"sent_data":2022,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.share.baidu.com","ip":{"addr":"182.61.244.229","port":80,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":1421601,"first_seen":"2013-04-25T14:45:11Z","last_seen":"2026-04-23T02:06:50.970524Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":385,"comment":"","tags":null,"fingerprints":null},{"fqdn":"push.zhanzhang.baidu.com","ip":{"addr":"182.61.201.94","port":80,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":1485849,"first_seen":"2015-07-22T05:44:02Z","last_seen":"2026-04-23T09:53:03.902884Z","alert_count":0,"request_count":1,"received_data":426,"sent_data":341,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node52.aizhantj.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2024-11-16T06:09:32.002355Z","last_seen":"2026-04-22T08:43:43.789076Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets-cli.s4.udesk.cn","ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-12-18","domain_rank":5598971,"first_seen":"2021-04-13T09:38:29Z","last_seen":"2026-04-24T10:02:37.367075Z","alert_count":0,"request_count":2,"received_data":307368,"sent_data":793,"comment":"","tags":null,"fingerprints":null},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-04-20T07:27:56.343717Z","alert_count":0,"request_count":1,"received_data":366,"sent_data":398,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d424255a5a93cf6f3244645823aea992","sha1":"8581f117c426cd862948be95eb40ac1d480a7f84","sha256":"f6cef5fd2fc86f85db2f7ecf350cbf989a66660457221620094fac0a9d363e2a","sha512":"83b6a166b2e9dc843edc105cd74b992db8c6cda16dbee175dc39d392c300692203dd455cab245d3e3a96abfd91010f12b5a404995285d4ff287a5561fa52acc4","ssdeep":"","tlshash":"ee9002d9f1d9a575f26d6431d51b9205a0164c458c3c415c6100307f385964a841b559","size":57,"data":"","first_seen":"2023-08-25T01:55:59Z","last_seen":"2026-08-07T22:14:31.838792Z","times_seen":2718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d3092393f33d27f094137597d79480","sha1":"9645e7ac69a5b8b7b8351f3813a9b685f7d840fc","sha256":"5155fd50a578ead2284f4e3c08c43d8872fd8035d82aac52ea95b436381a18dd","sha512":"ed894b067483bdee890f64357c1e17f4b788aa6ab6a2e62d81512a74362fbde3eea38fc21045fc0b2b08d1762f2e5bfe5a18981e83538d199f2c73a37bb9af72","ssdeep":"","tlshash":"0df09e6ed841a2581fc729bc57dfd648d46e4468d009d863b4d6c4cd3d38fc8442134c","size":508,"data":"","first_seen":"2026-02-14T09:51:52.24068Z","last_seen":"2026-05-16T14:02:40.562726Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/jquery.aniview.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"884e9f63a4f285a1a8d9be7629158b4a","sha1":"085a9b73b6808ab5cb6b2b8c6bf0f9ed9801ccb6","sha256":"2ea6063567cb3e4692bd96d029eae03998065febaecccfd9cb9b46c4dc9e1128","sha512":"39c81911e2e858001871c3941143ceedef4c3a26ad0f7755cedafa64ffacca6895f01dfe6d35caaf1e7d552f6b979844810d04e3667587633c13976d154cdfad","ssdeep":"","tlshash":"8a71014a75a21138a0af397f039f518c2bab91271209db203c4e5b589ff0f74b7956ed","size":3684,"data":"","first_seen":"2025-04-19T17:22:25.314619Z","last_seen":"2026-08-03T22:28:28.191653Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/main.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"840afe3af2dfe803075bb29a9a70a557","sha1":"c501b22db15a9b54696580e873b2e7b671f63e72","sha256":"9ad77c0782470f528b036e2113e34fc8e2bd26c853298626c19085b607eeb729","sha512":"9c53f60e81512cf6f915f80c6d3be2cdba1cf74c25fa739bb1ef208dbfe64469230fbef4f22115eceedd3267401d3b7200c377b3703e0fcbf47ef9821cce5adc","ssdeep":"","tlshash":"0b51df0df1aaa66010b7707b4f7f60842e261907b60dc040fd7cb5e02f9026d6a63eae","size":2492,"data":"","first_seen":"2025-04-19T17:22:25.315361Z","last_seen":"2026-08-03T22:28:28.201423Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/jquery-1.11.0.min.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1cd7fc161a5cb1d7102d1e72ee1e67f","sha1":"295153b52a34427bcaecb4a55c0aabcca825d544","sha256":"af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee","sha512":"6ecca8caf3f553b90ebf06b902b421b83fbcf2c863e3ca075c1356d3622aa72a56e2dbf3feb239547a5f0ba729361db0d3326ac33e970674dd22a1d883867898","ssdeep":"1536:1PpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jFkODZ2D5N9Rag0MOIdSZAgttoX5Y/:UIO4e2D5c4LgtDmLja98HrA","tlshash":"1493e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96383,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-08T03:36:25.634859Z","times_seen":2332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6df8ff95db66d97c29632f9d81270b5","sha1":"46829b51a75a034a32c4c1413df10da7444f6419","sha256":"3b562a7c0ab4aa8d5b55c7e4a3832c1fe71acf04927d943144b0b0d3fbf17633","sha512":"b5e4fb50c1f66f5bb53d9f5d244a3f660b5ec5d17303d6b97232ff18b9bcdc1d721c1e3dbdf7c31b998afd3ebc5153ebea0ea5b10b895d6d9a7c23577f42fc60","ssdeep":"","tlshash":"fbd0a78a3b4014b5e78a04b90deeca8eb16660295d9ec011888dc5d94814ee6689960c","size":235,"data":"","first_seen":"2025-03-09T01:56:05.554316Z","last_seen":"2026-08-07T22:14:31.839656Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"assets-cli.s4.udesk.cn/im_client/js/udeskApi.js","fqdn":"assets-cli.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f4627ef839c99c111469e0f69e8b1f5","sha1":"b04fc9d8c4b866e08a4521f558f798eedb8854d4","sha256":"97073e004f8509c3dc7ba22c26ef34074f6a1b0f669af84416eedd1a9e381565","sha512":"95be48e6691365674ea6ddabead9662f088e26ba275c2cf1aae716b48f072319a7181551daa0e3699432c3e69cc5aef78c9e1d872c89a3cd67b11387d13c4d8e","ssdeep":"3072:V/pGn+hQUw1JmzZj2U3XyISmppMK1ZCwBxj3zp8RRvOGDP:V/pGAZ6xmppMKawBxj3zpqP","tlshash":"6fe34bc9b990307543a711b250bf210e723e482ead0985a8b258d9f52dbca9d7337f7d","size":153084,"data":"","first_seen":"2025-09-26T16:32:46.312633Z","last_seen":"2026-08-06T06:35:09.244697Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e9da4808dafe1947824db36926433240","sha1":"be23f3b059d85707d2ac07a04a50786163721073","sha256":"de9e4b3d620b5efa270dfd2a54aa3932c93a92babc70641df622e71e2b2355de","sha512":"b9944ce7a5a4c88e84638f55226e972eda8de99efb79cdddb2db65a5fd705edcfc0cee6fbf1472f8b8168c170fe2201e5f970f16a75486e1be446fa39823113c","ssdeep":"","tlshash":"e8f02b3143d7792dd0679115e5a0869c273ac60ceba64b185e7b3d73a18c4d918366ec","size":547,"data":"","first_seen":"2026-04-14T23:11:42.840921Z","last_seen":"2026-05-02T08:31:04.999445Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-08T08:23:42.064973Z","times_seen":98929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30bacd5bad9574d83dc94e2799efb721","sha1":"65d73b3bdfecf44398cc6613d4ccd8d9206c2980","sha256":"71fa77bcb9eecfb1e36aab7df36dfcf574775c2f8401ef2698cae89593d38373","sha512":"14d5e370d0d8116ca003eb96cb25464d80a81d89294d75b4fac5ce2709bc6de0e697d15dcd81801f0d9d115434c18de0a2a5d5c28c69489ced5cb9fe9777b3b7","ssdeep":"","tlshash":"79c09264be3a6fa8907203276c38f99040facc22d14966c4646b360463047cb4b29224","size":131,"data":"","first_seen":"2025-02-06T06:30:26.390595Z","last_seen":"2026-08-07T22:14:31.840526Z","times_seen":777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9da3abc0a531b835b0a4c2f92041f5e6","sha1":"a5638d883a44881e9429e875dc0b9bddb62e9d5a","sha256":"3d9975b92f75b79481f608777397376d3a36d09de29a5cd9d2a81ec233245ff5","sha512":"9262021e2b541010106ca5641475b019e7e563e3d7b5a18250fc51c965a7cde263b9b0def846736dd85150a51fc6298255abfdda5ec9519273ef48f0ba9d2fe0","ssdeep":"","tlshash":"0de0c21f5c671974679b043a22bbc548b5e1516f5069d004b49ce8044f55ec6082e7c8","size":320,"data":"","first_seen":"2025-07-21T02:08:02.595908Z","last_seen":"2026-06-04T08:45:44.338302Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"813ab26bc9341a44b6ae3730df60b580","sha1":"9523c2f5e9c019c69dfed8638912e16dbefbbe8e","sha256":"4eed31e79cd2619a3cfd1fad7bf8bd037d04c4872ffade0e6fcbe115423d16e8","sha512":"de432086bde20a58797605b80e1ba1eaa76842aca9126579f7b2ee7f53260f19217a94970d8fce37c95ae69e1a61839678d82c07b6f53b58590b2932544014ea","ssdeep":"","tlshash":"fdb01204325061905057702de18b91c01c04d143c1143090b86ca8880f001f46623a0f","size":99,"data":"","first_seen":"2025-07-21T02:08:02.597294Z","last_seen":"2026-06-04T08:45:44.338815Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"1811089.s4.udesk.cn/spa1/im_web_plugins/46589/out_config?company_code=1i8d37e0\u0026language=\u0026session_key=\u0026callback=udesk_jsonp0","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb54ed405ca3f15cd67204746c19878","sha1":"485dbc03e0ba19c6f76223fd13f315d018df8ebc","sha256":"321e939a814b6601d427e17684276c719329efdf41344dbcfed444ca27857d15","sha512":"4f3f8f11225049345ca79599f355f4b7bf4851604a7d39e22210f9338bcc9a2680aa271380e6faf6a49422f8383fcecf56e54305446d11b96c90459c5fffeff8","ssdeep":"","tlshash":"41217d6a414856fd56e0ca81e73d3e0b656cccb725827821f51dc83ca0f71eb2322917","size":1264,"data":"","first_seen":"2025-04-19T17:22:25.407323Z","last_seen":"2026-06-04T08:45:44.336755Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a029dbd5775fcc8ce300c33a1f964f47","sha1":"04daedabf1e889ffa67c9d785cd334f74d48468e","sha256":"9742ba818c04ae092b983628333439966954ca39b8aaeeb0b1654497d4bcb1e4","sha512":"e5fe663e277a85ee70a71188ba9b4dd4af10e2532a11b5787ea3fcfe5375aa943c4438d4a8fbd2e8f446dc679af1cdb943af162b20dc920788efb2c15873b978","ssdeep":"","tlshash":"3901558b28ff687d2923084a0e2e7460b3a3100b00e6c0043c1c90c08fcda889b7e3b7","size":657,"data":"","first_seen":"2025-07-21T02:08:02.599886Z","last_seen":"2026-06-04T08:45:44.339841Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbd570ba0c8f39405e59fc9ec5423744","sha1":"705b5ff9551a47cc4f81f503b544ba01aac7812c","sha256":"92b3740f1a52f2f9a5ab8aa0e23583a1e28fc2f11aa28ab349f2c0ece1c6ae30","sha512":"9b7bb43c385adbc1cb15465ada47539b1de42411eab7d45c063c75c2d28d5ac6430c07545abcbe4f2bb8134ef1df07faa6f2f271dbeee52b097e79f307602c46","ssdeep":"","tlshash":"24f0924aa5e174ba15276d5a0a6e210aaa3190878c2eb9a4b60d0e54cf6d22c34ba680","size":622,"data":"","first_seen":"2025-07-21T02:08:02.601487Z","last_seen":"2026-06-04T08:45:44.34081Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d7099093e233845b299aa1486f97b0d","sha1":"f8e4b1a2ca3131e91bcd1144270d962167106468","sha256":"92d9562dc467b446b9acc0641279d1ee56e01d880a7c17bcc9754235db8e4b2e","sha512":"0e25e6bb90ea4bd6941996fe8e7c0a8321374636560ac2037e8747309bf7ac80601eaba74eeae6b8f842c2d4020b30acd03c4647db4834f29bb3e8c1b931ea96","ssdeep":"","tlshash":"88f07d05a1b530b31423bd3646be20056e3140834c2f7cb4760c0e50cf2d22c25365d0","size":549,"data":"","first_seen":"2025-07-28T02:25:35.597128Z","last_seen":"2026-06-04T08:45:44.341411Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/common.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5af3c7676afd100cc984ba9f8c93a0f","sha1":"fcb6cf85234515bfa0379287b268ff6ef1510ffe","sha256":"6adc8e8357133acb3bf32db06b18269784af652211fb9def05f38d47f9dd4e69","sha512":"03e92b754a5dee76a7415997ffbf40bc258bc76bbc584d99797df9ae18056a4b430e73ce47a2fdafe2b2e67a901d32936b1f5a6f5ba7d03765707daed60dff4e","ssdeep":"","tlshash":"bd41a71e4d86a2789313213552faca0cb6bbc00b5706c94434adf5568f58fe54c2bfe8","size":2391,"data":"","first_seen":"2026-04-14T23:11:42.824344Z","last_seen":"2026-05-02T08:31:04.963525Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/swiper.min.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c379840216a38360bb9b9ad8e04bb5c","sha1":"8f8e72c0d949e844dbcd2040b5aecb03a946b084","sha256":"f2ce7eb089bba678231b3521fa0b5fd07bb67eb043256ec45306246df9acc64a","sha512":"37673c191a453ec903cfae87428b577f608fb2545c8a573ceb303e640453ab1c7de30d13913d9874a076cfccf8c807c0a9d90b863947e8a347436160f2b9d29d","ssdeep":"3072:QFJcpzBLpMI1rlZuGHgZsUOUFBWqcQhXG:AAzBLaI1rlZuGHAsUOUFBWqcQhW","tlshash":"94c3184eb39061a550e36256525e8241a3b72409780ad0ac35b6cce7adbde4c13bfffc","size":118210,"data":"","first_seen":"2023-03-07T01:15:09Z","last_seen":"2026-08-03T22:28:28.199037Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f22dad9f25005682bbf89ff5b5516597","sha1":"40f1fc441166c535664656f8f604ae0e9ff8deca","sha256":"493bb666d56cd2a2b84a06834d3f7cacee7e75c9b3682629daf3cbb66aae890a","sha512":"66c24586787c2cf54d7ca733d6b36c1cad93bce941475c15cf4ecb30c11532d633813d1679004135f8eeeed078bb556e22aca8ca2ec7f2343f7ea001cf470786","ssdeep":"","tlshash":"e2117d9b7070b57600175d7b567f25002e2bc887883a3180f94d0e64cffc3ad652ea97","size":996,"data":"","first_seen":"2025-07-28T02:25:35.598257Z","last_seen":"2026-06-04T08:45:44.343995Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/push.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad532b192efe82c126bcae5d448ad494","sha1":"1d6ef90026626b798c09f559d982b30fc3821bcb","sha256":"4d50d0fa188e4c86813ca1cf404c1d69d47d46eb219fcb13a1ea344b90eee8d0","sha512":"8575586ca242a184da4d52be01dda61555cd6bfe974e12900df35f6ae36329e57d78ce59ee3c7553f1509c9b072318d7bddb204b4c699fe7213496b1c6b4d4ac","ssdeep":"","tlshash":"97211dce946202bc16a310681abf38dcf2a9063bdc54e541f86ad0410fb4a3703a7ed0","size":1418,"data":"","first_seen":"2025-02-06T06:30:26.389581Z","last_seen":"2026-08-07T22:14:31.827768Z","times_seen":720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/distpicker.data.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5c08845527aa740b6764fd4167c022","sha1":"69360c10cc93494dc4d345ac4bbc1952bdf73f19","sha256":"ff7e182a4cddf5327a81c0f6543f5386223b7326359abcb1d294defb04999143","sha512":"43088062304bd5e7805f54569ae2e8d3c47242ef0db91f6974e21afc301de9a5d99f9f08320bd24fc3d964e31789d86076dc1b0cb7ed8bc3759ffe5bc4fe8a7c","ssdeep":"1536:IRunfojphRPlnEnZfl+YAHBjDFWedpj7ZAvUmixdfQ7/T96BQQMOc0cyzlxrAL:IRunoph3n+2BjxRbmvUmkdfQjT9YQQMl","tlshash":"3b6344505cfe3a6535b681b2eb17857cb0b90374d1e28c2e59b53f808ec9669e3f4932","size":68511,"data":"","first_seen":"2025-07-21T02:08:02.548446Z","last_seen":"2026-08-03T22:28:28.203159Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-07T20:48:58.840207Z","times_seen":121753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"push.zhanzhang.baidu.com/push.js","fqdn":"push.zhanzhang.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"182.61.201.94","port":80,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb5a3267c9865ad4abe8d937734b62b","sha1":"b5478dd2edb3e64242eced1db2dbd945ef81f592","sha256":"674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2","sha512":"33318ed944a49a8fa334983408d68853b1fbe4f80b19adef6235f23d7708b616cd4f8dd28c8b8ebfbb5776aab8088229f3060cd789af34fe1db5038a98bd0d39","ssdeep":"","tlshash":"91d02be874a0c41c0ce710b17fab328cfab20b2755244d40c05b90013614b1f824bfe9","size":281,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-01T10:41:11.445466Z","times_seen":24479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"1811089.s4.udesk.cn/agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a483eba203a08416e647a4731d3f553","sha1":"a65e5d46316b294bed7cf20ca26b8ffaed84e376","sha256":"1f1ab234be8b10a02dc9be60671133f92effc42f0e1b38936818aaa16c7344b1","sha512":"0b74bda72e4f6db8424a3bb32e61895471b238a8213e4f6213cb0d5de8f57c51e905d6607cb448e8dc97a3da4573673c2112eeb68316d171885d425a864f3159","ssdeep":"","tlshash":"858004d301401f451414411545f04f411d300c1c1c40d015500c4c0530c74101504507","size":33,"data":"","first_seen":"2023-07-23T22:34:27Z","last_seen":"2026-06-04T08:45:44.281795Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/distpicker.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfcea3d36476e39fb29992a838095d3a","sha1":"3b309065cf7b9d438f141177959d11bcd5acca62","sha256":"8dfa54817ad296f180e08c13688dd7b9ff1a62f7cefee9143f89b2cdb4dd90d0","sha512":"a00cbfec5778e8d38a6ad42057a18455ff8fe481d9dfec8c4615bb49cae4ab4b7a7e6361c2630c66987a52bf79c85c85ed1887889039121d12262c324aab262a","ssdeep":"48:6SxJMe3fldTL6eNKBMCyxJWu3hzYArgFX/zdhkYhtLPPzm8+oRN/LbMArgFMhqSq:6SkkdTueN5xJWu3xY3t/Zh/poHExYYcp","tlshash":"6691511ab290652702eb94e2205f550aa43fb09d4009566cf9fed7f65fbc80af27723d","size":4219,"data":"","first_seen":"2025-04-19T17:22:25.364165Z","last_seen":"2026-08-03T22:28:28.192472Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"53bdd97215770af190ecf68c0afa255f","sha1":"1a0a16f0b691435001174853ba233c5f2a9f3701","sha256":"78f699096635a35e4dcb621ff562d0ee8121f9f4861cb0cfe2aa2fb911bc2111","sha512":"fc28810c4a0f84421dc966c2bbc9a665bb3af4e1b635dfb4db3d0fa7ac5fdc97e9ca80ba4258f5e6d5084b6662041875340faa3c12e0bbb19e9be2f279b18d3a","ssdeep":"","tlshash":"9cf0ddb51aa07e0216611496239183ad38b7a00e599baa49bead02948fd43e4050a920","size":635,"data":"","first_seen":"2025-11-13T06:52:38.043031Z","last_seen":"2026-06-06T22:59:32.600705Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9de93809582767ac3723b3a565e8b5b","sha1":"38cc175808845b2b90afc346101d4b9db85ade09","sha256":"22cdae5149bd75bc3f1229ee292a62d3cb623a35505307e7d2771136730c7248","sha512":"89749e7d319f0ed4e38fe9d2eaa24d63af517f64fd2b6a158b95f01e6e8c42834de0a4f62e6464c2e453262dc327f979d8b52097142f63d00b4d20b87dfcb7a2","ssdeep":"","tlshash":"1631cd2f5c7795321667306a67bbe2287422581f742ce499ffcc86801fb1a524963f4e","size":1715,"data":"","first_seen":"2025-11-28T04:28:41.058125Z","last_seen":"2026-06-01T19:42:23.511927Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ud.s4.udesk.cn/im_client/main.349a2aa3.js","fqdn":"static-ud.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"101.227.20.91","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"097b442b4133d1cefcfcf2bdd56faaca","sha1":"768c350333e6ac0a42d022ca0164c7f462f9996b","sha256":"5459f5cb993c788b339ff231ea8811a304853f40e385b4a3c56e925bfc6c60a8","sha512":"9cef7533ffd09c88aaa4e06eb79c3118dc549663f46e77c9f870695e5f94efabd7e15ef4b5f64a1fe557b88de26ec595125a3131f6d45195d7a40871e52523e7","ssdeep":"24576:F9cZ3faEXasxTG+qqOD2ebZku0364aeHJ4qOOovsUB3hCKkuaUm7KT:F9cdfaEXasxTGaODU36/eHJ4qOOovsUd","tlshash":"39256b4db295343203e720b510af260ab33b6b25940a8560f17ed9e96ff9d497237f2d","size":989135,"data":"","first_seen":"2026-04-24T10:02:49.307638Z","last_seen":"2026-05-06T11:28:11.699177Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ec64bb2893acd55d1b06a5a9c7e545","sha1":"a09174d02367a3c5620aebd6460d57b80e235aa8","sha256":"9aba0ab2aeebe66d8593c6d244585947d53b680d203179a69ce607cd2bb5cf78","sha512":"f6870556f6b9385f86a403b2420be8d9b90af8d009c6106798d21e52fc1bdbcb6903d3e76f2abb2b6592aac334c5b28777e538273d70998ff24117c96f220d23","ssdeep":"","tlshash":"79e08604b25612904093567b563728c41d599d0b56196241f41d49a1cff517d9e5eb0b","size":419,"data":"","first_seen":"2026-04-26T02:56:58.668176Z","last_seen":"2026-05-06T11:28:11.783019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9d49418c905eedc41e7f34f757e3a96","sha1":"d592a344f99989ec5bf02303ed966153cdad39fc","sha256":"e158691f523912392eef8e5f4a9260b07295471c346fe8b998d91fa999be5829","sha512":"2d79887f75af3bcdc2722461d0155061acaad6ff51cc68d4992bff324e4d31c83ca9ed16c0cf6608cbf6fe50e9c07894e37ff0f4c9b7513dc4a9f54429442b54","ssdeep":"","tlshash":"d8214c86a151767601175d7a07fb66513a29884b8a16a980fe0c0ed0cffc23db61f7a7","size":1214,"data":"","first_seen":"2025-07-28T02:25:35.600456Z","last_seen":"2026-06-04T08:45:44.34529Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?77279c5faf6215e854535dac98877926","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e3366319da012321db5761847ac1575","sha1":"a53dec0485ff11accddace4d10b5985111596d5a","sha256":"582851f18892d68187cdda6767dd15d5b7509e0a84718d0727af88e283fc0a5b","sha512":"9845e11efcb3edd953630918e37d87ffd04c30230f2a0c582f2fd69df9e660cedcefb8ad7ac9586da372fcbc991b2b1c9be0b109b64f3c6e786bcdc67e3337aa","ssdeep":"384:N/JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:N/4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"8dd2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29899,"data":"","first_seen":"2026-04-26T02:56:58.617053Z","last_seen":"2026-04-26T02:56:58.617053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae31d6acf3a49b071250469803b65739","sha1":"73ebe2e3a8e30fc5031a159cb6fb14e317b326ef","sha256":"13952a09d9c900703540e36534f01201db5f1495f33a67a5dfd2bfc87271bc37","sha512":"26b45216d15a7a58802a9937d89166f1e091060964d55c97948cd2ec56e3f2218aa0f8af6d819b2f0e5b2882b1cd2c83123d6229e2ce37dd356ad5d14590ea94","ssdeep":"","tlshash":"c5e0a32a100059076a750f34e1f7c009b1a57c972585995396b7c55c1f11ad3184a69c","size":420,"data":"","first_seen":"2025-07-28T02:25:35.601588Z","last_seen":"2026-06-03T23:27:16.193792Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fc2367a071998b9db5d1d0002432a49","sha1":"f9daf0921d3fd7b6f9ab27cf0b145f678a936ec3","sha256":"40ab1ba81f307689ed4156bd3e69849b6fa3e764dcab5ad3e5ebe4f54de2970f","sha512":"a4f6b9dd3fea541cb00f5a220c8ffc0364b6ec4525d93330362069f47de4e293743dd120f1e833cc08ec2aea24df7af3db29328cce40f5516f9d5fb8d4f014b9","ssdeep":"","tlshash":"b751ef0abaab9093793750a98fbf944171a4e0535e09dd21fa9cf3908f8412af2367d4","size":2627,"data":"","first_seen":"2025-07-28T02:25:35.602565Z","last_seen":"2026-06-03T23:27:16.195241Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d86cd5287dd8172a3caaa0308a34112c","sha1":"20892540b3a85eadfc27c720c419eabf328d8dd5","sha256":"7c9cc12c2bedd2ee31909613ce4167cfcc5d7b5d0510ac7bf3adc670049641e5","sha512":"1492e412517b0ad96545c33704f3108cf103a6c37ba975b4859465458355743dee57dfe15c5b3dca11012004e9abb00378aa9cf2b5f8f498007d356674f45427","ssdeep":"","tlshash":"9331bd2ae5a0077304ef60e21cae618764321107ab0cdc41be7cf9900f74871eaea6df","size":1716,"data":"","first_seen":"2025-08-20T02:11:19.441776Z","last_seen":"2026-05-04T02:23:51.101846Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/md5.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c37a6ec65ad89108b0db1cd1969635d6","sha1":"d5f969b445ff99ceb2e1889565ac8f0ff6562b0c","sha256":"6952465d6319a8fb9b52d8266a77077ba66396600e342e8d4bebdcd689c43d5b","sha512":"4e4ceb444a6a74f85ac6ec3d7116b64867cd9c66de176088748239ad0d51de26808586d1333fbc2fa91608e0183d02242ccd9030283ce01b2c0aa378f701d048","ssdeep":"192:cmGLmnFUJQEh47wVNc6n4LaXa8LZS7UEJkRAvk/4jLGkP:cmGLmFUJ7h47wrcASwEJkWvkmP","tlshash":"c3122f48f78d00968e53e230657e7c96f0ecf138097892abfbdc44e276895e49768f91","size":9456,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-04T22:29:49.303807Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"81efee1629ce52d29ae2f6e800364b36","sha1":"594909774e2f85f17d0224303e934a132b4ee323","sha256":"bf788eb5351dd93bd424b45b05dd5ca703dae088945a3604723859317687bb89","sha512":"d0a59c4da17d2cdaf3fd1a234f44ba14df540e5ccb6797b0898a6dbd4fe01e6d3061a3b4e99bdc59294c359cfb16c0fcc9fbaeec7f55c9971484b2f1ff50ba82","ssdeep":"","tlshash":"b5e0a3c533d1cc9809d77cb47113200860951d381e548f654d8128061cd576204e128f","size":408,"data":"","first_seen":"2026-04-26T02:56:58.673876Z","last_seen":"2026-04-26T02:56:58.673876Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ud.s4.udesk.cn/lib/im_client/deps.v1.js","fqdn":"static-ud.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"101.227.20.91","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b7f02f3207f1020453a1bd1daaf1f8","sha1":"67ff47f0b62d9041a5acc963708a9b320feb7fa5","sha256":"f33146ff52aeddefc9d223bafc4aaeae96ad480998be22c373969e32ceee9914","sha512":"01bdc30eeb28aa99cdeca4f2565353cff3fd83fb86a5d96515a0b30e3ab38b2d15d9e5cb3216f8bcda74c7ec3e753e967ccf39b3f28190c276e6973b77d39c99","ssdeep":"3072:dYHQqL8W8xRxqSMrWp7ARa98HrqF0Fuv9gCilmH/ID8d1zRyAip3LX6KIo:uHf58xrd2Ra98HrqFLv9THy8vS9X6Y","tlshash":"6384c7ccfad570a683a330b4006f510bb176a959b8498494f269d8d8bd7cd8e603bf7d","size":374354,"data":"","first_seen":"2023-09-23T01:50:10Z","last_seen":"2026-07-11T18:00:39.061807Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/layer/layer.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.517244Z","times_seen":6110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"ed360365b10a0297df6f582a3265d975","sha1":"52d243ef213661fa074b2cbe43791629930346e9","sha256":"894c4445b3717b12c1d602dcc26b93907913da411452681deb9bba82a7d8a4e0","sha512":"c73acd937d19e10ef4ad4c8bde527f15d25967b1a5e353a68edf435ac05cd3fc9c619b35f275ef255c70917a1f7100e83e951aa69f904126d6b71cfa156205a4","ssdeep":"","tlshash":"fe80000fae88c8ac00002c8a0032f20c00208f08f020c82802faa0000ba0bcc0c02c00","size":34,"data":"","first_seen":"2025-02-06T06:30:26.40088Z","last_seen":"2026-06-07T01:45:53.530202Z","times_seen":678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57b01959c25ff49765d3f32e88cc8901","sha1":"863b63e633e9d15b545774ed16ff2fa1ef7f8516","sha256":"0e952126c734fb7a034d44c69fb02e25c7957632db5634337107caa7d466a868","sha512":"4ca4aae14369b46530c363da356a1fd4972c5794ca12456a21ec531a1d06c9d11cfb63e64655c5a0991c8912d42250e6439cdecdd432b2df479b0a32c5673f48","ssdeep":"","tlshash":"08f097ae5c41e6981fd729ac97efd64cc86e4468500ad8a3b4dac4ce3d38fd8482534c","size":508,"data":"","first_seen":"2025-02-06T06:30:26.401802Z","last_seen":"2026-06-07T01:45:53.528224Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5f76cda20f6eaef6e0e4501431bc9718","sha1":"8d6e99424c07e5fd61d985f628f8d1983d099928","sha256":"becc298d21008152e5a47fcf0d6df7ba1777adb842b8220b10a114109154bbe2","sha512":"b594fef0b005c5f9e2abc583237c5700c7f4d3e95a525d290363ec58158a51e4355f9935a72adb3141da564a27ab7cc8a6d8fd23009b1c2ee9845ad9bccb061f","ssdeep":"","tlshash":"01b092929451a42e533287231166201883a9baa0fb461480e8589acd4ce9b44d9b792d","size":116,"data":"","first_seen":"2023-03-07T13:03:49Z","last_seen":"2026-06-07T05:33:46.93078Z","times_seen":14275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"45fd8aa8e68b8d39e51f5e80866ecb2d","sha1":"f23136c4b4b2d7f0b498cbb0ce213d0bbd7c6f67","sha256":"122fe78d8a7cf6115ad51ae19620945d31fb9e2be233f71602eb8ab3eab9424c","sha512":"1323d284630d9f20b04a84d1d506b2a226a4f4813a9f25fe50b1aa764a31088054ac00a8c0160794a356b90341fbb13ae760a0eb31eb1b6372fac17d39b6054e","ssdeep":"","tlshash":"e0f02b3143d7692dd0679115a5a0869c2736c60c9ba50b185e7b3973a14c4d518366ec","size":528,"data":"","first_seen":"2026-04-14T23:11:42.849802Z","last_seen":"2026-05-02T08:31:05.015371Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/md5.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.796Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/md5.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators","md5":"c37a6ec65ad89108b0db1cd1969635d6","sha1":"d5f969b445ff99ceb2e1889565ac8f0ff6562b0c","sha256":"6952465d6319a8fb9b52d8266a77077ba66396600e342e8d4bebdcd689c43d5b","sha512":"4e4ceb444a6a74f85ac6ec3d7116b64867cd9c66de176088748239ad0d51de26808586d1333fbc2fa91608e0183d02242ccd9030283ce01b2c0aa378f701d048","ssdeep":"192:cmGLmnFUJQEh47wVNc6n4LaXa8LZS7UEJkRAvk/4jLGkP:cmGLmFUJ7h47wrcASwEJkWvkmP","tlshash":"c3122f48f78d00968e53e230657e7c96f0ecf138097892abfbdc44e276895e49768f91","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-04T22:29:49.303807Z","times_seen":201,"resource_available":true,"data":null}},"time_used":2876,"timings":{"blocked":1556,"dns":0,"connect":0,"send":0,"wait":1320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/css/swiper.min.css","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.568Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/css/swiper.min.css HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19774,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19512)","md5":"bf3ee7b87c0f1578c7e842c60d864857","sha1":"d7e43a846b5e69234cebc5d734a4882f3118573e","sha256":"7d41cc80678502aaf3181f2f00f46553773fc0da93ab9290f2da2ae64720f1f7","sha512":"74f55d2835d9bdf2b70fae51db1a9e793d5142dc5715b76f4eb484fc4eb168b46e2b6c91db60c00a4fc018821a8d18b504382cc439ba53575dfc4d600dac4172","ssdeep":"192:dOaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:dOa1/lS0Cifi5o/mXOGJ5c","tlshash":"9492612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-09T16:23:53Z","last_seen":"2026-08-07T09:24:12.930076Z","times_seen":557,"resource_available":false,"data":null}},"time_used":4498,"timings":{"blocked":1561,"dns":0,"connect":254,"send":0,"wait":1330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20251029/1761707176384215.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.603Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20251029/1761707176384215.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2025:10:29 10:39:15], baseline, precision 8, 750x495, components 3","md5":"2e4039214093f282347a969b4ef5dfb2","sha1":"fd9545961b9320fb808c268feba53ea91ebfb23d","sha256":"bd9a97db5f601b2b72a6811bf3abe554993851d0ca681e3af9e3de342085f7ce","sha512":"5e73733efca09ad4bf73132f3b333b0e1dd0f3615c4fee0a40636272ea171174f5e3c6ab907eaaa43892cbea4e74d00db549ac431a834344f1d5ccca932530b6","ssdeep":"6144:kiEiwcu6mSJa8u+i13RQCiTzVXMw7wPHtXyE16EbUiN:kPjcuPM5Dc9vtXP1jYW","tlshash":"dd649f84b0580491894d3a6cd0fcda86d3f70de10e74065f27cdec85ae6ae6d4ed9acb","first_seen":"2025-11-04T11:01:15.303561Z","last_seen":"2026-07-03T01:37:56.623137Z","times_seen":40,"resource_available":false,"data":null}},"time_used":12569,"timings":{"blocked":10178,"dns":0,"connect":0,"send":0,"wait":1332,"receive":1059,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20210731/1627723657762922.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.793Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20210731/1627723657762922.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":36822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:07:31 17:24:57], progressive, precision 8, 110x110, components 3","md5":"bac768e93b1d6ebd085c5f276146a660","sha1":"5774a6408f8799945dc9acc794cee9670e49ff51","sha256":"50b14f230387c6306de0dbe509e23500616877cc654c1b2ab636101271d563da","sha512":"7a4283fb4b04da829a74c3c9dab864e45cabb3eefa8bf28f2b567dd06817ee522826396297f91c2ff80f4062e32f5860bb0e89457311bd690b9b31671f837d26","ssdeep":"768:lH/YIY8z9wPnH/YIY8BcqYyZSx2CdApRSD13rC/39H1K6:lgf8Cgf8iqdSx2CdySuvR/","tlshash":"baf2bf3a9fabae41fdd1273418f5c7d59300afa9f7932252749d6500bbb42c4799c0a3","first_seen":"2025-04-19T17:22:25.311434Z","last_seen":"2026-07-03T01:37:56.593299Z","times_seen":58,"resource_available":false,"data":null}},"time_used":9989,"timings":{"blocked":8393,"dns":0,"connect":0,"send":0,"wait":1332,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"34.92.231.9:39016/","fqdn":"34.92.231.9","domain":"34.92.231.9","tld":""},"ip":{"addr":"34.92.231.9","port":39016,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:17.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"35.220.147.2","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:61:49:A3:5E:1F:F4:C1:2B:C5:CD:F8:31:7F:0A:F5:F6:5F:8C:11","sha256":"88:A5:75:61:A2:E4:67:A2:CC:4E:C1:A4:EE:BB:4B:80:78:D2:A1:4D:FE:97:D1:E2:A7:B0:8C:D3:AF:07:0A:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 34.92.231.9:39016\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: openresty\r\ndate: Sun, 26 Apr 2026 02:56:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8b181bb6767bc5795dcf17341a387e5b","sha1":"b5e2a9fb1f8a4aad3c7127c769af4c780b47bef4","sha256":"32cbc376cd769a26d108ae31678f975b863b7066e110c59d9a212c7281bd8c81","sha512":"2550b61ffa1ef8dd2613704798e3a717321c8e3569849dcbfb3049f441b8bccf9287b7139f3cef3371c1bb0476da31523e5e83b6a81af3ebc4d91142e06c76c6","ssdeep":"","tlshash":"07c08c2a341e2c0c97a321b616c36a60d192c3308a5a28104700025330c30168ac3329","first_seen":"2023-04-05T08:34:05Z","last_seen":"2026-08-08T11:20:04.930347Z","times_seen":10670,"resource_available":true,"data":null}},"time_used":1531,"timings":{"blocked":655,"dns":0,"connect":215,"send":0,"wait":220,"receive":0,"ssl":437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"static-ud.udesk.cn/img/client-btn.png","fqdn":"static-ud.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"163.181.243.184","port":80,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:22.526Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/client-btn.png HTTP/1.1\r\nHost: static-ud.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: image/png\r\nContent-Length: 388\r\nConnection: keep-alive\r\nDate: Sun, 26 Apr 2026 02:53:10 GMT\r\nx-oss-request-id: 69ED7E164453333535A52EEC\r\nx-oss-cdn-auth: success\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nCache-Control: max-age=2592000,s-maxage=86400\r\nContent-MD5: 26uSl2svZE+g6yuUZieXtw==\r\nx-oss-server-time: 8\r\nVia: ens-cache12.l2de3[0,0,304-0,H], ens-cache4.l2de3[1,0], ens-cache23.gb9[0,0,200-0,H], ens-cache9.gb9[3,0]\r\nETag: \"DBAB92976B2F644FA0EB2B94662797B7\"\r\nLast-Modified: Thu, 27 Jun 2024 09:46:15 GMT\r\nx-oss-hash-crc64ecma: 6119650453687395873\r\nAge: 192\r\nAli-Swift-Global-Savetime: 1777171990\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Sun, 26 Apr 2026 02:54:32 GMT\r\nX-Swift-CacheTime: 7118\r\nAccess-Control-Allow-Methods: GET,POST,PUT\r\nAccess-Control-Allow-Origin: *\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nTiming-Allow-Origin: *\r\nEagleId: a3b5f39d17771721828516575e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit colormap, non-interlaced","md5":"dbab92976b2f644fa0eb2b94662797b7","sha1":"60cca7795a605a6e0149a2a0150b6bec099cab38","sha256":"e1e877dd31d9759f0bb05f7fb89c7f7ce366dd3cce16ae168ae2938722238882","sha512":"106e679a92426dd61c9b9bd559b42fca79f40dfbc2302044e86376c2e150b9cf2b220759c0738181bdbf599ef9679f4068f726f54e17115852332eb9969a1276","ssdeep":"","tlshash":"efe0c0c16913161841ba147e8822cc61d16eec7918c400b24d48b56a95f7101ec09903","first_seen":"2023-07-23T22:34:27Z","last_seen":"2026-06-06T13:41:56.19819Z","times_seen":192,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":326,"dns":225,"connect":23,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:22.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1 HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.shoujunffm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 02:56:23 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 33\r\nset-cookie: aliyungf_tc=c32d1867482953957457c8022760355c1a4669a05ae551982b89662eb069a2e7; Path=/; HttpOnly\nacw_tc=2f6fc13817771721833344336e00849c13da3d77498222c20db6c3f436b780;path=/;HttpOnly;Max-Age=1800\r\naccess-flag: J\r\naccess-control-allow-origin: *\r\naccess-control-request-method: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-allow-headers: X-CSRF-Token, X-Udesk-Tid, X-Udesk-Ifc, Origin, X-Requested-With, Content-Type, Accept, Authorization\r\ncache-control: no-cache, max-age=0, private, must-revalidate\r\nx-request-id: 457e5bea2d292f8203538f7b95a88011\r\nx-udesk-ratelimit-url: GET_/agents/free\r\nx-udesk-ratelimit-delay: 0\r\nx-udesk-ratelimit-type: tenant\r\nx-udesk-ratelimit-rate: 1000r/m\r\nx-udesk-ratelimit-by: rating\r\nx-udesk-ratelimit-default: false\r\nx-gateway-upstream-latency: 45\r\nx-gateway-proxy-latency: 1\r\nvia: gateway/1.4.2\r\nserver: elb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a483eba203a08416e647a4731d3f553","sha1":"a65e5d46316b294bed7cf20ca26b8ffaed84e376","sha256":"1f1ab234be8b10a02dc9be60671133f92effc42f0e1b38936818aaa16c7344b1","sha512":"0b74bda72e4f6db8424a3bb32e61895471b238a8213e4f6213cb0d5de8f57c51e905d6607cb448e8dc97a3da4573673c2112eeb68316d171885d425a864f3159","ssdeep":"","tlshash":"858004d301401f451414411545f04f411d300c1c1c40d015500c4c0530c74101504507","first_seen":"2023-07-23T22:34:27Z","last_seen":"2026-06-04T08:45:44.281795Z","times_seen":95,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A5X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.615Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A5X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"63252383f6e9782ab7403ae6e56e2ff3","sha1":"dc48ebb4f5d4906f5e78964821b065c1af423e0c","sha256":"64631c0500b80970a218a127dbcf9a55d77e9eff7c17cbf9d60441920184e9f5","sha512":"a1b50ed9a3edc072c846be84c55d9f8f732e2ff42cc874ecf74584205dc8d5e77f7536ce56a46c643e812d4ae77351c7cc0c95e6b082cb3dea4a1c34e1e1e0ad","ssdeep":"","tlshash":"cf317485ea006842524eee9138aa80779b518440d5d0b0b27dcba02a69b52fd1f5e5ef","first_seen":"2025-04-19T17:22:25.39332Z","last_seen":"2026-08-03T22:28:28.200203Z","times_seen":60,"resource_available":false,"data":null}},"time_used":13905,"timings":{"blocked":12588,"dns":0,"connect":0,"send":0,"wait":1317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/layer/layer.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.795Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/layer/layer.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.517244Z","times_seen":6110,"resource_available":true,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/im_client/audio/im_notify.mp3","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","date":"2026-04-26T02:56:27.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/audio/im_notify.mp3 HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 26 Apr 2026 02:56:27 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 8088\r\nset-cookie: aliyungf_tc=e243a51b3b374c14396ec913b86041e1c9c348718e151d57e2dcdc62d5fc26f7; Path=/; HttpOnly\nacw_tc=2f6fc13817771721872854758e00848decb1b7f40b9d1664bdbe62a37853ca;path=/;HttpOnly;Max-Age=1800\ntid=qro; Path=/; Expires=Sun, 26-Apr-26 03:56:27 GMT\nifc=0; Expires=Sun, 26-Apr-26 03:56:27 GMT; Path=/\r\nlast-modified: Sat, 11 Apr 2026 09:08:22 GMT\r\netag: \"69da0f86-1f98\"\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-range: bytes 0-8087/8088\r\nx-gateway-upstream-latency: 2\r\nx-gateway-proxy-latency: 0\r\nvia: gateway/1.4.2\r\nserver: elb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":8088,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"abb5d74e62f65093632a1324b3635463","sha1":"f08dcc22aa790bf8e904f9c7ccbbe7be8591f5e2","sha256":"b9d2a7f895ad5c17a750d8937d21bed72430fea08026328b62dbcc9e63f720c9","sha512":"5d2b6609401dab50a4de514ae7862cc2b73ebde0553093f05c9457c72aa2e319d28a948ffdbcb80e7fdfe874e91f81ea6edba440a040a0bab2ae9337734261f7","ssdeep":"192:7mmLqQLNPL0RLMhtJg4lod/ODeWEl5Re4rwV4rHpG8:Cm0EJ3mLZeUL","tlshash":"81f16b929f00d35dc1a2cf7f386fe63db941948e6c4adcd5e10a8748597c4c03e76589","first_seen":"2024-03-12T06:09:44Z","last_seen":"2026-06-06T22:59:32.520229Z","times_seen":539,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/css/style.css","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.569Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/css/style.css HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51393,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"troff or preprocessor input, Unicode text, UTF-8 text","md5":"4f44a221a7fe8bad0b804713f417e440","sha1":"7d6c1215b8fcb7dc211c262c1fcb4816e2464bd8","sha256":"93703fbcd5879bbc11cc74aff9e9ce03a95437b955123cfe1ce5956339adcf10","sha512":"7ef2105381696c79ca94bedb9cde70bed4a199787db7d222baaf8d1296313b441065aafc0e23f0446e99695f703bfe1521d93766e31c2a5e0052f09202531b10","ssdeep":"1536:RACDCnYXNMyD11u5s/rEzmYL3i81+aDyt+1b0bE:3+YXGU11u5lzfr51+aDyt+1bUE","tlshash":"d63394236b142845b217d1f9bf966b98170d8012fe4f6eba76167c3cc7c82d4427b789","first_seen":"2026-04-26T02:56:58.57176Z","last_seen":"2026-04-30T01:13:55.219614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2890,"timings":{"blocked":1560,"dns":0,"connect":0,"send":0,"wait":1330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20211122/1637561812505783.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.587Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20211122/1637561812505783.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217498,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021:11:16 12:31:33], baseline, precision 8, 1920x770, components 3","md5":"40bc44296c8ce95d66e14ae06e148f02","sha1":"ed771d8b9588958aebea4697e2697e901ac35aaf","sha256":"ea77e5f90f9bb8de14e38d302901e0cf8ed6643e6d2e28b14eadeb754e78d615","sha512":"31644985afcd6b0d9c6b2523133b79f21c7769b701540178a58e7b8aaab324ed686a05535bb42cc082d3f9ed0aba4850f16262f31e203ef753b6dcb409a308dc","ssdeep":"3072:DbrNA/+9c+dQ/JgWM4d4ibzhIyVsPvLzY+ZwwOWP5yKcHX4eJS2F5newEDBF:rNDqEYJPM4p+o+rJ/WXpJS2FFEDBF","tlshash":"c324121a07c89f62d995ab78892ab0077087738077c3f50ab9cdad9cb7f26e24cdd055","first_seen":"2025-04-19T17:22:25.366362Z","last_seen":"2026-07-03T01:37:56.622568Z","times_seen":59,"resource_available":false,"data":null}},"time_used":5322,"timings":{"blocked":2897,"dns":0,"connect":0,"send":0,"wait":1341,"receive":1084,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/btn4.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.518Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/btn4.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/public/static/portal/css/style.css\r\nCookie: __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%22317419c5-2f93-590e-917f-8501b6d805cc%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201777173977921%2C%20%22ct%22%3A%201777172177921%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=1771ab3d-09b2-541c-9d59-14660dde2acf; __51vuft__Ki3Am2Z8sqj2SDaC=1777172177927\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 14, 8-bit/color RGBA, non-interlaced","md5":"1d7314c4da0b86415da8a9b80798fcfb","sha1":"73f129a2761251076d5baf6aab40b8c54381bc1c","sha256":"137c55be62d0d5cf451e4f36282bf95055f68d830896dcece9ba87f9734408b4","sha512":"33dd1d386792502c13d81b43aab6ea7c64dd43f5bbba5421cd98aa21541f7685b7b57891baad6a2afa9be7c54bf47a048ee1c52a0b31fdd3a19722e1575f5084","ssdeep":"","tlshash":"3521981afe103d80a69cf78336fe50779753854099c0e0e4bccfc01679201be888a5cb","first_seen":"2025-04-19T17:22:25.343471Z","last_seen":"2026-06-03T23:27:16.140352Z","times_seen":54,"resource_available":false,"data":null}},"time_used":7919,"timings":{"blocked":6593,"dns":0,"connect":0,"send":0,"wait":1326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-ud.s4.udesk.cn/lib/im_client/deps.v1.js","fqdn":"static-ud.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"101.227.20.91","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","date":"2026-04-26T02:56:24.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /lib/im_client/deps.v1.js HTTP/1.1\r\nHost: static-ud.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1811089.s4.udesk.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1811089.s4.udesk.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\ncontent-length: 113668\r\ndate: Fri, 27 Mar 2026 10:02:35 GMT\r\nx-oss-request-id: 69C655BBE3631F3339C564AC\r\naccept-ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 07 May 2024 06:34:04 GMT\r\nx-oss-hash-crc64ecma: 12473512000523517377\r\ncontent-md5: xLfwLzIH8QIEU6G9Harx+A==\r\nx-oss-server-time: 62\r\ncontent-encoding: gzip\r\nvia: ens-cache31.l2cn9026[0,0,200-0,H], ens-cache54.l2cn9026[1,0], ens-cache7.cn9365[0,0,200-0,H], ens-cache20.cn9365[1,0]\r\nage: 2566430\r\nali-swift-global-savetime: 1774605755\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 02 Apr 2026 10:40:21 GMT\r\nx-swift-cachetime: 2071334\r\naccess-control-allow-methods: GET,POST,PUT\r\ncache-control: max-age=2592000,s-maxage=86400\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ntiming-allow-origin: *\r\neagleid: 65e3142817771721857508378e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":374354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4b7f02f3207f1020453a1bd1daaf1f8","sha1":"67ff47f0b62d9041a5acc963708a9b320feb7fa5","sha256":"f33146ff52aeddefc9d223bafc4aaeae96ad480998be22c373969e32ceee9914","sha512":"01bdc30eeb28aa99cdeca4f2565353cff3fd83fb86a5d96515a0b30e3ab38b2d15d9e5cb3216f8bcda74c7ec3e753e967ccf39b3f28190c276e6973b77d39c99","ssdeep":"3072:dYHQqL8W8xRxqSMrWp7ARa98HrqF0Fuv9gCilmH/ID8d1zRyAip3LX6KIo:uHf58xrd2Ra98HrqFLv9THy8vS9X6Y","tlshash":"6384c7ccfad570a683a330b4006f510bb176a959b8498494f269d8d8bd7cd8e603bf7d","first_seen":"2023-09-23T01:50:10Z","last_seen":"2026-07-11T18:00:39.061807Z","times_seen":557,"resource_available":true,"data":null}},"time_used":3815,"timings":{"blocked":1244,"dns":745,"connect":237,"send":0,"wait":1208,"receive":116,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/top.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.794Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/top.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2c4e7a78536a5051d163300ceefd3cb2","sha1":"c7d41b5de3afc781a947d78905509e8047fe29da","sha256":"f01b34af31c9c0ba7c659113b857f7fda6fa6cc561bb8c330901f4f1d6fcd563","sha512":"811c71672761f445b649bcea5e4157acef26e263d099c23355a4b57bbc74bf435eddc4fae0be4f7e78f33721ab7a14f6d4bd9898879fd80f74400beb8f9e47ce","ssdeep":"","tlshash":"5f41f989f9103502639dd48114f7147a6721c4c0cde4b8e5fc0fd65a8e344f4965dadb","first_seen":"2025-04-19T17:22:25.321957Z","last_seen":"2026-08-03T22:28:28.199573Z","times_seen":62,"resource_available":false,"data":null}},"time_used":10318,"timings":{"blocked":8997,"dns":0,"connect":0,"send":0,"wait":1321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/B1X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.771Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/B1X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"a3b824271d86cd8c84ae741a33879675","sha1":"c1295998666b540fee1a41938b693f3fdf3da22f","sha256":"4cddbd53637a45885c6ba68aab4984e0237be51b8b22296799983aa58c7cb3c6","sha512":"bd3dee6519de88b7c4de67947784437e8a556424422d9034ba5b11d2580f28589304e72822f9280431d2399b2aeb1ea3e71ac37016f80a9bfee3eb7603299a90","ssdeep":"","tlshash":"f6512a4ff84075c125a9ebd230c58047c916d9a0d6c1a4a56dc7c02f297a3f801aedcb","first_seen":"2025-04-19T17:22:25.383213Z","last_seen":"2026-08-03T22:28:28.200769Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9019,"timings":{"blocked":7708,"dns":0,"connect":0,"send":0,"wait":1311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"1811089.s4.udesk.cn/agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:22.536Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1 HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 134\r\nConnection: keep-alive\r\nSet-Cookie: aliyungf_tc=3d21a43f75549ebc393b046a7e6b271887461e9109b72109306244e89fe6df37; Path=/; HttpOnly\nacw_tc=781bad5217771721826541201e00b0d7e767a62f8e6617a2114d80adee33bc;path=/;HttpOnly;Max-Age=1800\r\nLocation: https://1811089.s4.udesk.cn:443/agents/free?im_web_plugin_id=46589\u0026session_key=\u0026callback=udesk_jsonp1\r\nServer: elb\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":33,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/B4.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.780Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/B4.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"737ee1d80b8a6c7d17c5bf0168e1de90","sha1":"4475ad07faaf197e4fdd154206005dd79425acd2","sha256":"6977e42b1f292fa1b8b7a505f9f8a52be23c3be3281f58ff12bdf4b6057a12fa","sha512":"d3c22399171f3bacef29adf7d6a71bf6a00249904d62865701456f2f827ebb97b9b27acd43abb290ec6d30e105c0ad4052dace42f40f77f63b1532c49bf7e51e","ssdeep":"","tlshash":"88413c19bf817980a1bff74222d5e1439d3bcc04aa82d1633ccea0b3285517104d8aee","first_seen":"2025-04-19T17:22:25.309476Z","last_seen":"2026-08-03T22:28:28.195232Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9330,"timings":{"blocked":8009,"dns":0,"connect":0,"send":0,"wait":1321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20260413/1776071356376900.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.592Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20260413/1776071356376900.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1920x770, components 3","md5":"0e4b182c4b67cd9223722a4ef722a0ab","sha1":"48b8cb590d1f25aa5e3043834c02387d40ef430c","sha256":"6520e5abf72be8ba506225f50cf177536e63649fa7eb5193086367acb4efd756","sha512":"b03b9931e90fbefc4c523b6e87412920794a9ac60447d88e43d6febc5f91aee1a1206de5b8376c3cf4d32218015882cd04d3530154926d820ee77ccc667d0af9","ssdeep":"3072:n72Kv/CBzRM+6eNoHr2meSPByfjPOHCP/XHKxpxHejXqpghR7i+Xu4LMQW:S9BzbufeUUjHwx8ThfXu/","tlshash":"f81412321bf58d53e28f94b06055b2ada9e08d5d71d763d2fddca8082ff8191ac7214b","first_seen":"2026-04-26T02:56:58.577583Z","last_seen":"2026-07-03T01:37:56.570846Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6874,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":1331,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?f28a02745acacb3e2e3a396d5050f1fc","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:19.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?f28a02745acacb3e2e3a396d5050f1fc HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.shoujunffm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nServer: apache\r\nStrict-Transport-Security: max-age=172800\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:23.707Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 134\r\nConnection: keep-alive\r\nSet-Cookie: aliyungf_tc=7704f0e6fc9f6af06877c53207a12462b2747e70515baa1b25fa66cb829b45e4; Path=/; HttpOnly\nacw_tc=2f6fc13817771721838185173e00898ca48929b60552c3e6e977ba47f93cc0;path=/;HttpOnly;Max-Age=1800\r\nLocation: https://1811089.s4.udesk.cn:443/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent\r\nServer: elb\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A4X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.613Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A4X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"aae3427db45d4dd2d3b1bea587763d02","sha1":"909a9e916d53fdc1acdb908fce821e98846c06e6","sha256":"14064feb0d8f9939a85b9a9f4b9b6af6c4aef0ed699d16bd97060731e1e58ad1","sha512":"04a428858d9ef3aa6abb5a92848f611c62e7a83a2692e22516b3bc0d36b6d22b73c01ca9660e7501315941db9dab6675d019d6174fae4828653b563bbb629a32","ssdeep":"","tlshash":"a431eb06f501f883d47dd5a919d4823bda104d50e5e1f0422dced0a91df72bb0d85ddb","first_seen":"2025-04-19T17:22:25.389622Z","last_seen":"2026-08-03T22:28:28.19573Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8174,"timings":{"blocked":6853,"dns":0,"connect":0,"send":0,"wait":1321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/im_client/css/ui/emotion.css","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:22.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/css/ui/emotion.css HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.shoujunffm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 02:56:23 GMT\r\ncontent-type: text/css\r\nset-cookie: aliyungf_tc=7975d4a2c11c484fa1ade2f0a2617f5a3dd0c7feebe8138d9e12c9fb458db4b5; Path=/; HttpOnly\nacw_tc=2f6fc13817771721833344335e008462ab00e4e5e0021e109d7ed85bb72492;path=/;HttpOnly;Max-Age=1800\ntid=qro; Path=/; Expires=Sun, 26-Apr-26 03:56:23 GMT\nifc=0; Expires=Sun, 26-Apr-26 03:56:23 GMT; Path=/\r\nlast-modified: Tue, 14 Apr 2026 09:33:52 GMT\r\netag: W/\"69de0a00-35d4\"\r\nexpires: Sat, 25 Jul 2026 02:56:23 GMT\r\ncache-control: max-age=7776000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: gzip\r\nx-gateway-upstream-latency: 10\r\nx-gateway-proxy-latency: 1\r\nvia: gateway/1.4.2\r\nserver: elb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13780,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13780), with no line terminators","md5":"40cab9b70d08968def830c125920630b","sha1":"e71e4844168a09ff9d7367e65f4df445a5358b78","sha256":"0fee0f72419af7ea9316fd583434a497c2115315c48b1d56f82c9e6ffc1b2417","sha512":"0ceafdbb01f602b5ea5517ffee47587ee0df07a2fb1d612a91745fdc9b07481e381491b12c795f8ec84dcd2adb03fa9571362dc98e38b12f15d4cb3a1c1fd493","ssdeep":"96:MjLFNfFNI/6DskD0WYXZv90FqXZQ4bVV8Sk1seurml8Wnkba7LU4J:Y/fFNm6Ds3WYJv9jZQ4bVV8Sveyj6d","tlshash":"68520629d48f6239b823eb21f474ad5240399740d9131fbc221fb7bc9bc2cd591abe61","first_seen":"2025-08-20T19:35:08.196188Z","last_seen":"2026-08-06T06:35:09.239952Z","times_seen":481,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20221117/1668678138346438.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.589Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20221117/1668678138346438.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244029,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x770, components 3","md5":"7e7e05d51b0baf8b61d97bb2fc2a0ece","sha1":"4136e1dc072ff5ddad38ad215ea9add8e599dd2b","sha256":"1d0746abc3e9d8b32b0f218b024c0f6f7521153442fc9f945f66bcfa2c3a5cd7","sha512":"487de967a217ee06020240e894c0c0674cc72d4acb18b6907d696f56fbeb08f89d37f59c347c1951acab2af4f9c4ee97c0a80f5b67b6111185f66880feb0d3cd","ssdeep":"6144:v9DL2D81xTXiE4dL6NbtI85fAQZxxIeHN3sUEG0XUaS:V481xDCL4NZAQOYeUOXU/","tlshash":"c634230bb8b5edd595246c32618e6deb33fca1e81fd72e28d9229a1035046f2f0bd551","first_seen":"2025-04-19T17:22:25.328512Z","last_seen":"2026-07-03T01:37:56.588494Z","times_seen":60,"resource_available":false,"data":null}},"time_used":6569,"timings":{"blocked":4224,"dns":0,"connect":0,"send":0,"wait":1324,"receive":1021,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20260414/1776147697902812.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.590Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20260414/1776147697902812.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:20 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5443 x 2183, 8-bit/color RGBA, non-interlaced","md5":"067b299a8f5e61035b4bd5715886b9db","sha1":"2560fe76b46a6afa6fb368a0c41d7db0944247b1","sha256":"2349704150b0b483f4e2a7e6b499101cc830039eca8d6ffa229c307f7394a582","sha512":"2303f6b5097f320dc4b0ba7f0bc244622496b1afe7aebf47d32efd7941472a40adec8d9c63453c900710a0eda842b9653968cfc195b1ee574deda5bc597a5d22","ssdeep":"6144:oWsGUFA+gxPxFkdy9MMRrWnzeyUeFYRTfMTs:J9sAvxcdEMM6CyWTM4","tlshash":"973423c3edfd71b1ad153688136322aaaf14af3c18c8139c175cd8beb478917160ad97","first_seen":"2026-04-26T02:56:58.581208Z","last_seen":"2026-04-30T01:13:55.196387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7042,"timings":{"blocked":5197,"dns":0,"connect":0,"send":0,"wait":1332,"receive":513,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/B3.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.778Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/B3.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"2614691a11fc9338641415cb994a2732","sha1":"ed4172e76f5236abbd75c36dd71df99ec76a8a96","sha256":"a08b603f3d15ac32919efd792c28b56eecb80c6ece1a5b6b2d442f53fdf3e5ab","sha512":"98c7309c0c6de4df58df35971c4db7aa01e3018ef3b4e0de90b970bd487316a7fd6735d8ddf81e035945689e970b478f44505476a2bc88c6f3a9735580d0b003","ssdeep":"","tlshash":"e0512c49f9106582a9dce79112ea00e35b6308b0a105b819dd8ec47f08f61fad5b87d7","first_seen":"2025-04-19T17:22:25.39783Z","last_seen":"2026-08-03T22:28:28.197164Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9347,"timings":{"blocked":8010,"dns":0,"connect":0,"send":0,"wait":1337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"api.share.baidu.com/s.gif?l=http://www.shoujunffm.com/","fqdn":"api.share.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"182.61.244.229","port":80,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.986Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /s.gif?l=http://www.shoujunffm.com/ HTTP/1.1\r\nHost: api.share.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":1940,"timings":{"blocked":826,"dns":349,"connect":277,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/distpicker.data.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.797Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/distpicker.data.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44698), with CRLF line terminators","md5":"8d5c08845527aa740b6764fd4167c022","sha1":"69360c10cc93494dc4d345ac4bbc1952bdf73f19","sha256":"ff7e182a4cddf5327a81c0f6543f5386223b7326359abcb1d294defb04999143","sha512":"43088062304bd5e7805f54569ae2e8d3c47242ef0db91f6974e21afc301de9a5d99f9f08320bd24fc3d964e31789d86076dc1b0cb7ed8bc3759ffe5bc4fe8a7c","ssdeep":"1536:IRunfojphRPlnEnZfl+YAHBjDFWedpj7ZAvUmixdfQ7/T96BQQMOc0cyzlxrAL:IRunoph3n+2BjxRbmvUmkdfQjT9YQQMl","tlshash":"3b6344505cfe3a6535b681b2eb17857cb0b90374d1e28c2e59b53f808ec9669e3f4932","first_seen":"2025-07-21T02:08:02.548446Z","last_seen":"2026-08-03T22:28:28.203159Z","times_seen":56,"resource_available":true,"data":null}},"time_used":3156,"timings":{"blocked":1574,"dns":0,"connect":0,"send":0,"wait":1321,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/jquery.aniview.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.577Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/jquery.aniview.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"884e9f63a4f285a1a8d9be7629158b4a","sha1":"085a9b73b6808ab5cb6b2b8c6bf0f9ed9801ccb6","sha256":"2ea6063567cb3e4692bd96d029eae03998065febaecccfd9cb9b46c4dc9e1128","sha512":"39c81911e2e858001871c3941143ceedef4c3a26ad0f7755cedafa64ffacca6895f01dfe6d35caaf1e7d552f6b979844810d04e3667587633c13976d154cdfad","ssdeep":"","tlshash":"8a71014a75a21138a0af397f039f518c2bab91271209db203c4e5b589ff0f74b7956ed","first_seen":"2025-04-19T17:22:25.314619Z","last_seen":"2026-08-03T22:28:28.191653Z","times_seen":71,"resource_available":true,"data":null}},"time_used":1820,"timings":{"blocked":212,"dns":1,"connect":267,"send":0,"wait":1340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A4.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.612Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A4.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:21 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"5aaf2bf64e5fc8f553d5c6a6736c76f7","sha1":"3e7ff95623a05af5ee2343db4e29b348f7dab556","sha256":"f784cfa465bc3b0b2c19a7b066f62566f80182aef44c0b35d97b9e4352bd85f9","sha512":"9ce532af3bd2d1f8c9d545449cf3597f26eaa9b1e7bd275d9a7fac72486274fbf94fa9000b6b8d329bd3357b5b979f7d59294ce35fe4d26f28bf3ee4e9249afa","ssdeep":"","tlshash":"fc41fb4cd4007dd061bde58755f6803b8993809089c4f89bbccec0775db02b907a54df","first_seen":"2025-04-19T17:22:25.349415Z","last_seen":"2026-08-03T22:28:28.194153Z","times_seen":64,"resource_available":false,"data":null}},"time_used":7974,"timings":{"blocked":6637,"dns":0,"connect":0,"send":0,"wait":1337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"push.zhanzhang.baidu.com/push.js","fqdn":"push.zhanzhang.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"182.61.201.94","port":80,"asn":38365,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.981Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: push.zhanzhang.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Length: 232\r\nContent-Type: text/javascript\r\nServer: bfe\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":281,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"1bb5a3267c9865ad4abe8d937734b62b","sha1":"b5478dd2edb3e64242eced1db2dbd945ef81f592","sha256":"674bc0c70f98d627b8a7e1d278a1f21ffe33815565f7d5371bf0275da57571b2","sha512":"33318ed944a49a8fa334983408d68853b1fbe4f80b19adef6235f23d7708b616cd4f8dd28c8b8ebfbb5776aab8088229f3060cd789af34fe1db5038a98bd0d39","ssdeep":"","tlshash":"91d02be874a0c41c0ce710b17fab328cfab20b2755244d40c05b90013614b1f824bfe9","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-01T10:41:11.445466Z","times_seen":24479,"resource_available":true,"data":null}},"time_used":1367,"timings":{"blocked":571,"dns":350,"connect":222,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:24.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.shoujunffm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 02:56:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: aliyungf_tc=26b5b1851819c368272927aa1c6a7e501e703dd85774f45307e4032e4e253a3b; Path=/; HttpOnly\nacw_tc=2f6fc13817771721841494433e00848a89b0207db0abd82c2eaec8dbe8e698;path=/;HttpOnly;Max-Age=1800\ntid=qro; Path=/; Expires=Sun, 26-Apr-26 03:56:24 GMT\nifc=0; Expires=Sun, 26-Apr-26 03:56:24 GMT; Path=/\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 11 Apr 2026 09:08:22 GMT\r\netag: W/\"69da0f86-1398\"\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-gateway-upstream-latency: 3\r\nx-gateway-proxy-latency: 0\r\nvia: gateway/1.4.2\r\nserver: elb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5016,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1399)","md5":"8585029c552b567f38f3f2d9a084f755","sha1":"f6a77e35836fa389651db44d6421cad83ff7daad","sha256":"6b1d5e5b92a0bb612cda81b218c4592088185b4f75bc52010897ab026752c14b","sha512":"f138c94b94948cf3ac4522e313e99237fb24e593964c5f4274a531234cc1f3e0955f9e2a269e803195183e2b87fe21ae55855d1d74a62e347460df3551ba78d1","ssdeep":"96:pplotR1TQKIs8HV5kWRG9tNDhPpST9xB6gKWJiMpErC3HOK:O31sKIsSjG9vuxKWJiMpqC3uK","tlshash":"97a1c6374435e03202732994f7b2f21d6023960fe92adc55fbed42d80fd0f998946a29","first_seen":"2026-04-24T10:02:49.32162Z","last_seen":"2026-05-06T11:28:11.731408Z","times_seen":10,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/icon3.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.599Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/icon3.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:20 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 44, 8-bit/color RGBA, non-interlaced","md5":"60e5aa5d71748907a7bcb540eae59c14","sha1":"e0355c9f98b48ec549b8d56967dfcb37ea43f41d","sha256":"7a5439ef3a22cdf900deabcba5c584cf455a4bb77bf1b548c44b7b543d9ac2ae","sha512":"387a842b9e0fecfa2c1200d2c46e17959364028bb94ce718f2116244f9ba65fda0fc09aea73263524195a145c94ea7105f26d9c8f8097696ebe14233870ec530","ssdeep":"","tlshash":"7231fa8afe413d40e4e9ebd336e6606b5523468099a9f0b5e9cbd1020d311f6cd8d7d7","first_seen":"2025-04-19T17:22:25.388718Z","last_seen":"2026-08-03T22:28:28.204934Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6650,"timings":{"blocked":5310,"dns":0,"connect":0,"send":0,"wait":1340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A1.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.607Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A1.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c75198deba2c58d8a2d1d7abb9abbad7","sha1":"4d40f3127494802cf8eddd63f3cf8dae3ee5d821","sha256":"3b8af51ff8cf98e504e3cf85fd028ddcf5400c3334c79c0f2eb1874748ad29e8","sha512":"b81c2f13992dc3d1acc72b9b15a460cf8827b506a43b5d7a39c6795a69522477f90806bb6f5c6ad7b884cca399d536b9ad464f849d5e66320250fd1ce96ac34d","ssdeep":"","tlshash":"2031fa1bf6503c42a61fea4130e9853bcb26c980da81f0156cdb941606f10f93bb7cdb","first_seen":"2025-04-19T17:22:25.310623Z","last_seen":"2026-08-03T22:28:28.188448Z","times_seen":60,"resource_available":false,"data":null}},"time_used":13252,"timings":{"blocked":11924,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A2X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.610Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A2X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"a90ee690fd254febe89c9314f2fc39bd","sha1":"085ab23645f51c943bb3c8340346576efcc79519","sha256":"3929225f3c2959a58a3798f2f5b5c34f4852b943bdcedc391f5623a9f1416081","sha512":"c884937cf7374ba13306832d003cc01f4aee24091b18c4242fbe443228b1a7763bac085d19f6a12b8eedf091f7f3b8c24479ae9bd7b6d551c3f8dbaf5b79e06c","ssdeep":"","tlshash":"a031d7c9fe8139419649e98125e642236a21c840e8d2f4b2bdcf943a24b22f559755db","first_seen":"2025-04-19T17:22:25.382297Z","last_seen":"2026-08-03T22:28:28.18737Z","times_seen":59,"resource_available":false,"data":null}},"time_used":13287,"timings":{"blocked":11967,"dns":0,"connect":0,"send":0,"wait":1320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/B2.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.775Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/B2.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"4b8c625d2c954078c26b6b7d5c6fc6dc","sha1":"0d41436bb87d5c6569eee9934578eec6c2064f0b","sha256":"226ef5bc64baf6d9713989aa0fcccf7b60fc965c9ace029058ec5d2285cd9e7d","sha512":"a7f28eccf19b95a532fc900201a2fa6f7d4cc09065261b1b0ead052125a2af348003b7f1593d99289470d484ac8765013532277d8e8d457a2aabf74187154c58","ssdeep":"","tlshash":"7d514e08fe606e40ace9ff4121f5c5e76f21fb40500594423cda885d16b04b29d7e5d7","first_seen":"2025-04-19T17:22:25.35252Z","last_seen":"2026-08-03T22:28:28.194754Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9148,"timings":{"blocked":7812,"dns":0,"connect":0,"send":0,"wait":1336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/swiper.min.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.575Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/swiper.min.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65270)","md5":"9c379840216a38360bb9b9ad8e04bb5c","sha1":"8f8e72c0d949e844dbcd2040b5aecb03a946b084","sha256":"f2ce7eb089bba678231b3521fa0b5fd07bb67eb043256ec45306246df9acc64a","sha512":"37673c191a453ec903cfae87428b577f608fb2545c8a573ceb303e640453ab1c7de30d13913d9874a076cfccf8c807c0a9d90b863947e8a347436160f2b9d29d","ssdeep":"3072:QFJcpzBLpMI1rlZuGHgZsUOUFBWqcQhXG:AAzBLaI1rlZuGHAsUOUFBWqcQhW","tlshash":"94c3184eb39061a550e36256525e8241a3b72409780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T01:15:09Z","last_seen":"2026-08-03T22:28:28.199037Z","times_seen":418,"resource_available":true,"data":null}},"time_used":2071,"timings":{"blocked":211,"dns":1,"connect":263,"send":0,"wait":1332,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A3.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.611Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A3.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:21 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"646700a9abd72bb25982b2a204c160c0","sha1":"a5bbcc7b3664bb29b3bc4b24c13327324cf0421c","sha256":"5145ee2039f6ecae4c069794da076ea12dd4872c0bbad78bec770438eb908ae9","sha512":"af8719dd75286f4e82d841dde072eb4397029f61da740c39f48524f25f6a96edf956bdebce78440fd8390c0a3f59862d48a6529ee59967686db4ef0ae4095fe0","ssdeep":"","tlshash":"eb21b6acfe0039c1558dea8235e6906b9f534d40e6c1e0e6addfc02b18312b7095d9eb","first_seen":"2025-04-19T17:22:25.397017Z","last_seen":"2026-08-03T22:28:28.183918Z","times_seen":65,"resource_available":false,"data":null}},"time_used":7868,"timings":{"blocked":6547,"dns":0,"connect":0,"send":0,"wait":1321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node52.aizhantj.com:21233/tjjs/?k=zjjhmvlczo3","fqdn":"node52.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /tjjs/?k=zjjhmvlczo3 HTTP/1.1\r\nHost: node52.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T02:56:09.930Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":1553,"timings":{"blocked":1553,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/close1.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.794Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/close1.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 53 x 78, 8-bit/color RGBA, non-interlaced","md5":"7bf9e13f55ec284896db2703a12480d8","sha1":"d7ce3a7c6cf2d1c9e757c9f07a8b97dd9e0005f3","sha256":"7993fa0041ddae232a57acc5598ae556c75cbf2a21c4666cca6402821356aaf9","sha512":"9469cc79b29dcf4b08992a79f951df3f24d63a1c5c40d1643c35c2b155df16c84bf8c57a62caf30dffa9edd1f6f3ffdd6ee1092384a4db6cb0dcd552113973da","ssdeep":"","tlshash":"4a4108ace9047681b17cc7a51ade64aa5bb2c9a00d90d0505a9ec0b798620fbcd2d9db","first_seen":"2025-04-19T17:22:25.334519Z","last_seen":"2026-08-03T22:28:28.18026Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8380,"timings":{"blocked":7058,"dns":0,"connect":0,"send":0,"wait":1322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/btn3.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.517Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/btn3.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/public/static/portal/css/style.css\r\nCookie: __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%22317419c5-2f93-590e-917f-8501b6d805cc%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201777173977921%2C%20%22ct%22%3A%201777172177921%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=1771ab3d-09b2-541c-9d59-14660dde2acf; __51vuft__Ki3Am2Z8sqj2SDaC=1777172177927\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 14, 8-bit/color RGBA, non-interlaced","md5":"354268c65c9fa511ef19a8f055a7d6e6","sha1":"3b934fd8a53bb546260fd60f73778932bdef74e1","sha256":"49d218acc4e5cece45698056a9adac6de1ea2642346a22ca13a3e5dfa40eaf99","sha512":"9cdaf2ab38fcb55e89ed94145abf4ade4346a76d8cb3adff113e2bad9e8cb005646105e83c673da6ca21f4e3436d2c4e5bd1e9b4a11d65092325d8aa8d36b3f4","ssdeep":"","tlshash":"c821775afe107d80abecf6c630f5b06799674ed055a0f07175cec00719612b5c92d5cb","first_seen":"2025-04-19T17:22:25.38416Z","last_seen":"2026-06-03T23:27:16.134317Z","times_seen":54,"resource_available":false,"data":null}},"time_used":7745,"timings":{"blocked":6408,"dns":0,"connect":0,"send":0,"wait":1337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cli.s4.udesk.cn/im_client/js/udeskApi.js","fqdn":"assets-cli.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:19.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/js/udeskApi.js HTTP/1.1\r\nHost: assets-cli.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.shoujunffm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Apr 2026 02:56:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nset-cookie: aliyungf_tc=85d76da2f1085457651e2004355d4eaa2dee01017d86ea5ecbdc7550598515b1; Path=/; HttpOnly\nacw_tc=2f6fc13817771721804934035e0084905ac2faf3fcd8900a8bab7f3117de3c;path=/;HttpOnly;Max-Age=1800\ntid=0; Path=/; Expires=Sun, 26-Apr-26 03:56:20 GMT\nifc=0; Expires=Sun, 26-Apr-26 03:56:20 GMT; Path=/\r\nlast-modified: Sat, 11 Apr 2026 09:08:22 GMT\r\netag: W/\"69da0f86-255fc\"\r\nexpires: Sat, 25 Jul 2026 02:56:20 GMT\r\ncache-control: max-age=7776000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: gzip\r\nx-gateway-upstream-latency: 2\r\nx-gateway-proxy-latency: 0\r\nvia: gateway/1.4.2\r\nserver: elb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153084,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32035)","md5":"9f4627ef839c99c111469e0f69e8b1f5","sha1":"b04fc9d8c4b866e08a4521f558f798eedb8854d4","sha256":"97073e004f8509c3dc7ba22c26ef34074f6a1b0f669af84416eedd1a9e381565","sha512":"95be48e6691365674ea6ddabead9662f088e26ba275c2cf1aae716b48f072319a7181551daa0e3699432c3e69cc5aef78c9e1d872c89a3cd67b11387d13c4d8e","ssdeep":"3072:V/pGn+hQUw1JmzZj2U3XyISmppMK1ZCwBxj3zp8RRvOGDP:V/pGAZ6xmppMKawBxj3zpqP","tlshash":"6fe34bc9b990307543a711b250bf210e723e482ead0985a8b258d9f52dbca9d7337f7d","first_seen":"2025-09-26T16:32:46.312633Z","last_seen":"2026-08-06T06:35:09.244697Z","times_seen":325,"resource_available":true,"data":null}},"time_used":2570,"timings":{"blocked":1074,"dns":0,"connect":269,"send":0,"wait":421,"receive":0,"ssl":803},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ud.s4.udesk.cn/im_client/main.349a2aa3.js","fqdn":"static-ud.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"101.227.20.91","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","date":"2026-04-26T02:56:24.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/main.349a2aa3.js HTTP/1.1\r\nHost: static-ud.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1811089.s4.udesk.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1811089.s4.udesk.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\ncontent-length: 299262\r\ndate: Wed, 15 Apr 2026 14:41:17 GMT\r\nvary: Accept-Encoding\r\nx-oss-request-id: 69DFA38D4CAB813738579B79\r\nlast-modified: Sat, 11 Apr 2026 08:42:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8273902121628676633\r\nx-oss-storage-class: Standard\r\ncontent-md5: CXtEK0Ez0c78/PK91W+qyg==\r\nx-oss-server-time: 16\r\ncontent-encoding: gzip\r\nvia: ens-cache26.l2cn9026[0,0,200-0,H], ens-cache59.l2cn9026[0,0], ens-cache21.cn9365[0,0,200-0,H], ens-cache20.cn9365[1,0]\r\nage: 908108\r\nali-swift-global-savetime: 1776264077\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 15 Apr 2026 14:55:21 GMT\r\nx-swift-cachetime: 2591156\r\naccess-control-allow-methods: GET,POST,PUT\r\ncache-control: max-age=2592000,s-maxage=86400\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ntiming-allow-origin: *\r\neagleid: 65e3142817771721857278286e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":989135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64191), with no line terminators","md5":"26372d0526423b5e8797bf861e3312bf","sha1":"5435bb99c5d707150508682279c18a418106f8ac","sha256":"2c12fffcb2b7a1e98e0e698700702ae3ebdc1cf9abd883dec60b48d758e7f117","sha512":"f66e8ba1d1d0722cfef32f9998dfc440781b946563e08f72f57d00594267587b6f9a8e26b4da6ea69330d81db8fbaa18aeb42b6e4c2ad18d657a069d49c67162","ssdeep":"24576:F9cZ3faEXasxTG+qll2ebZku0364aeHJ4qOOovsUB3hCKkuaUm7KT:F9cdfaEXasxTGVlU36/eHJ4qOOovsUBr","tlshash":"76256b4db195343203e720b910af260ab33a9b25940a8560f17ed9e96ffdd497237f2d","first_seen":"2026-04-26T02:56:58.598817Z","last_seen":"2026-04-26T02:56:58.598817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3671,"timings":{"blocked":1219,"dns":743,"connect":225,"send":0,"wait":449,"receive":782,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20251101/1761977289286577.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.583Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20251101/1761977289286577.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4320, bps=182, compression=none, PhotometricInterpretation=RGB, orientation=upper-left, width=7000], baseline, precision 8, 1920x770, components 3","md5":"b9b80363d641b2cb5819e253046f8c49","sha1":"7d3355965ffd364a31b86c7ff52489fff03a8a3e","sha256":"25cdd6e2f7bdd67a86ec3208fa3c38fd8096b08bf16795e8283641e78bed8416","sha512":"1e4c5a6840fbc11b5b6c5a25af3d07fba59b2d435e70fd1fc712a8f2b99c30b11940c8a6cf99c6bdd28a06819d485b608cae568aecc367945e303d03e8bd4ae7","ssdeep":"6144:V9al8atww0DcLofput3K5Id1sgFFEAA9YN6z4IQ:idtwff83K5Id6UmAwCt","tlshash":"7d2412246e42ae2adffe0c3763ddd98f04455ec264d31225759c25a7b3b3b2d1b08ba4","first_seen":"2025-11-04T11:01:15.291476Z","last_seen":"2026-06-21T14:42:37.776401Z","times_seen":41,"resource_available":false,"data":null}},"time_used":5205,"timings":{"blocked":2877,"dns":0,"connect":0,"send":0,"wait":1312,"receive":1016,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20211213/1639367690343725.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.602Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20211213/1639367690343725.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181333,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2021-11-17T10:38:39+08:00], baseline, precision 8, 750x495, components 3","md5":"76d49a9c243dd0870d38ec3d42e4c50d","sha1":"aa478dc584f1d7d7038398079b4129db1f7ec1d0","sha256":"ce20d289f847ef2bef84d8a4eed6e9e69d2f36b623e4743747b1d771854430df","sha512":"6d31bb32680c35bffcbfd31a2547310dd5440128fe5396c6ade3450a2004abf571b07db5b1550bbeee5b9d0cc8e8032ea86c7bb18071e0097c53ed72c60fc043","ssdeep":"3072:JYTO/YHjqR2qYKR/4kIVAuq1Fqh0Gwav566xInVgxE79F9M:iq/YDqR9LBItqfa5dInVgm9M","tlshash":"a20412ad3d051b3d97f782d11b3a4aa93f32ea85a913d52d2c48c8fe49ff52b1d4014a","first_seen":"2025-04-19T17:22:25.3186Z","last_seen":"2026-07-03T01:37:56.601276Z","times_seen":62,"resource_available":false,"data":null}},"time_used":11974,"timings":{"blocked":9889,"dns":0,"connect":0,"send":0,"wait":1322,"receive":763,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20221117/1668678172455983.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.604Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20221117/1668678172455983.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x495, components 3","md5":"0d96be44450e91c00da96403543f396b","sha1":"b43351e528f82495e5852036f7f0c32ddd4ec0d1","sha256":"e83f015bd795c2fe8953587afb6a9b8553d757da0a309713afb004e8880a3b42","sha512":"bf73e0165b42ef1f22cddb8e3b62f4ad90822655b11de02b1b6768c22a6923a0faea244b04f8bd7989ce14e3acc9e58d7005c5e7308baa6f1cb085c8273eba46","ssdeep":"6144:c1oc9THcWQKhGu4g2tiawHb9Vs+J60w0WbqZn:oo8QhYawHb9jM0ZWbmn","tlshash":"7e1423911422ff90f0da65652f0e42066248e773de5bb8bcf66471676fa41f0788ce9c","first_seen":"2025-04-19T17:22:25.362126Z","last_seen":"2026-07-03T01:37:56.581308Z","times_seen":56,"resource_available":false,"data":null}},"time_used":12598,"timings":{"blocked":10508,"dns":0,"connect":0,"send":0,"wait":1322,"receive":768,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.505Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nCookie: __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%22317419c5-2f93-590e-917f-8501b6d805cc%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201777173977921%2C%20%22ct%22%3A%201777172177921%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=1771ab3d-09b2-541c-9d59-14660dde2acf; __51vuft__Ki3Am2Z8sqj2SDaC=1777172177927\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:18 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-07T11:15:24.570289Z","times_seen":6792,"resource_available":false,"data":null}},"time_used":1307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=63D8E31FE0DC343C\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=2135471211\u0026si=77279c5faf6215e854535dac98877926\u0026v=1.3.2\u0026lv=1\u0026sn=59584\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026tt=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:19.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=63D8E31FE0DC343C\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=2135471211\u0026si=77279c5faf6215e854535dac98877926\u0026v=1.3.2\u0026lv=1\u0026sn=59584\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026tt=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=7140E76A57C91E7E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-08T11:18:50.54161Z","times_seen":376356,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":478,"dns":0,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"1811089.s4.udesk.cn/im_client/css/ui/emotion.css","fqdn":"1811089.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:22.523Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /im_client/css/ui/emotion.css HTTP/1.1\r\nHost: 1811089.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 134\r\nConnection: keep-alive\r\nSet-Cookie: aliyungf_tc=3358a8d2b1d6bc563439468772b490522778f811f8e6f63336d12e15b468c132; Path=/; HttpOnly\nacw_tc=2f6fc13817771721826345055e008984d057441964dbaf549097c89938d3bb;path=/;HttpOnly;Max-Age=1800\r\nLocation: https://1811089.s4.udesk.cn:443/im_client/css/ui/emotion.css\r\nServer: elb\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":13780,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/distpicker.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.798Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/distpicker.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (738), with CRLF line terminators","md5":"cfcea3d36476e39fb29992a838095d3a","sha1":"3b309065cf7b9d438f141177959d11bcd5acca62","sha256":"8dfa54817ad296f180e08c13688dd7b9ff1a62f7cefee9143f89b2cdb4dd90d0","sha512":"a00cbfec5778e8d38a6ad42057a18455ff8fe481d9dfec8c4615bb49cae4ab4b7a7e6361c2630c66987a52bf79c85c85ed1887889039121d12262c324aab262a","ssdeep":"48:6SxJMe3fldTL6eNKBMCyxJWu3hzYArgFX/zdhkYhtLPPzm8+oRN/LbMArgFMhqSq:6SkkdTueN5xJWu3xY3t/Zh/poHExYYcp","tlshash":"6691511ab290652702eb94e2205f550aa43fb09d4009566cf9fed7f65fbc80af27723d","first_seen":"2025-04-19T17:22:25.364165Z","last_seen":"2026-08-03T22:28:28.192472Z","times_seen":60,"resource_available":true,"data":null}},"time_used":2905,"timings":{"blocked":1585,"dns":0,"connect":0,"send":0,"wait":1320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/jquery-1.11.0.min.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.572Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341), with CRLF line terminators","md5":"a1cd7fc161a5cb1d7102d1e72ee1e67f","sha1":"295153b52a34427bcaecb4a55c0aabcca825d544","sha256":"af2419dd15e09ea913cfe94d130f9870486732e57764e0f02ea3846f204146ee","sha512":"6ecca8caf3f553b90ebf06b902b421b83fbcf2c863e3ca075c1356d3622aa72a56e2dbf3feb239547a5f0ba729361db0d3326ac33e970674dd22a1d883867898","ssdeep":"1536:1PpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jFkODZ2D5N9Rag0MOIdSZAgttoX5Y/:UIO4e2D5c4LgtDmLja98HrA","tlshash":"1493e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-08T03:36:25.634859Z","times_seen":2332,"resource_available":true,"data":null}},"time_used":2058,"timings":{"blocked":211,"dns":1,"connect":259,"send":0,"wait":1326,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20251101/1761977313994075.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.600Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20251101/1761977313994075.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":232352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=4320, bps=182, compression=none, PhotometricInterpretation=RGB, orientation=upper-left, width=7000], baseline, precision 8, 750x495, components 3","md5":"7433b55fa396dc6bfeb030371423ca11","sha1":"5d7bf20aad5ed104785446052ccbc07fab1bafaf","sha256":"40b7b574dc22eda2e212375f8437225e879d8fdb39b9bf43d37464f690397dda","sha512":"8ca9bd24bdee374382ad57afd6429056a9b275cb52580c01e2aba82d3a4a6c983a0009b7b196f4d75565acc57ee3ddef5178cb2f44e707752541af73a0a0e6d3","ssdeep":"6144:XxQBD70MmY51FpR3op27YP/G7ETNiB5hqc7BQ3VO243:XxmhNpR3J70ieUXUF3VK3","tlshash":"733413289ce30c74d4cd6d34c726ba1aae0197e862678d503d0c4f1b37a2bfd6a3d496","first_seen":"2025-11-04T11:01:15.318307Z","last_seen":"2026-06-21T14:42:37.767355Z","times_seen":42,"resource_available":false,"data":null}},"time_used":11931,"timings":{"blocked":9526,"dns":0,"connect":0,"send":0,"wait":1331,"receive":1074,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"assets-cli.s4.udesk.cn/im_client/js/udeskApi.js","fqdn":"assets-cli.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"203.107.54.59","port":80,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.501Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /im_client/js/udeskApi.js HTTP/1.1\r\nHost: assets-cli.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 134\r\nConnection: keep-alive\r\nSet-Cookie: aliyungf_tc=e6bb49e123a6d9d27235d9e91499df832ed14d6c8dbee7e38e9a20bc99471d97; Path=/; HttpOnly\nacw_tc=781bad5317771721790374382e006a92c71300476c684459595008a0d64ef0;path=/;HttpOnly;Max-Age=1800\r\nLocation: https://assets-cli.s4.udesk.cn:443/im_client/js/udeskApi.js\r\nServer: elb\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":153084,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":1177,"timings":{"blocked":404,"dns":155,"connect":249,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/js/main.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.578Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/js/main.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"840afe3af2dfe803075bb29a9a70a557","sha1":"c501b22db15a9b54696580e873b2e7b671f63e72","sha256":"9ad77c0782470f528b036e2113e34fc8e2bd26c853298626c19085b607eeb729","sha512":"9c53f60e81512cf6f915f80c6d3be2cdba1cf74c25fa739bb1ef208dbfe64469230fbef4f22115eceedd3267401d3b7200c377b3703e0fcbf47ef9821cce5adc","ssdeep":"","tlshash":"0b51df0df1aaa66010b7707b4f7f60842e261907b60dc040fd7cb5e02f9026d6a63eae","first_seen":"2025-04-19T17:22:25.315361Z","last_seen":"2026-08-03T22:28:28.201423Z","times_seen":64,"resource_available":true,"data":null}},"time_used":2634,"timings":{"blocked":1285,"dns":0,"connect":0,"send":0,"wait":1349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20260107/1767750478748041.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.582Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20260107/1767750478748041.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1635 x 253, 8-bit/color RGBA, non-interlaced","md5":"a7fb9ebd3c86558a310d53d39ae89905","sha1":"604550c0486ed4660689d29e7718bd707cb3c2f7","sha256":"a0c3057edb5272a3e8382166fa2829914c440ac965ab020a8073127118c35076","sha512":"fcf7d516d4679ff20294bec8e6a7aaa2779b41af7d73ac88c7a8321c289ff636e6e453d8a8b36bb047834d9376cc702469b5c0ad45719da1f7bd0ae88f7c9d3f","ssdeep":"768:2JnJ5EaAzeqHDHIsSt9fF2GFRrcQEKGhmfdBIf:Un/EjzeqHsj9fYcBcxK5If","tlshash":"6ce2f101c08fe8dafcce78707c99b1f751771b6d6c83860a32b09a17ad614ee194da93","first_seen":"2026-01-13T07:16:23.400341Z","last_seen":"2026-07-03T01:37:56.580591Z","times_seen":42,"resource_available":false,"data":null}},"time_used":5833,"timings":{"blocked":4231,"dns":0,"connect":0,"send":0,"wait":1339,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20251029/1761707153441439.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.585Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20251029/1761707153441439.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Windows), datetime=2025:10:29 10:30:53], baseline, precision 8, 1920x770, components 3","md5":"4e5c9d1efba736e14d7001ff6f64f336","sha1":"37a564df8a2b1ad22bdc7643b3ceb1f29fc4d211","sha256":"769a650d9cbe4e8ec4e962db3bbf489ddd630513d69bce2754a1e1225d3cde36","sha512":"bc7357cc7fe2fbee7674f37ef793500c0e12dbe5b920b024783438ad6475558894689730d3768d567627a97cb447c35d106ec1664edb440e6e5877aeede0791c","ssdeep":"6144:7F0hBhF5f4wkQYLIMTdaeQfAjGtIhEuQ4N7b6WlwUaNxq1AuqZTlf/QgUqPVL:abfFJYLIMZaVfAaSS65KNweueTF/Qi","tlshash":"e17423256a505c22d8e5f33888ee56c0d7b31dc41f526b2ebb9e0e153bb81b48dc919b","first_seen":"2025-11-04T11:01:15.257097Z","last_seen":"2026-07-03T01:37:56.571489Z","times_seen":41,"resource_available":false,"data":null}},"time_used":5276,"timings":{"blocked":2875,"dns":0,"connect":0,"send":0,"wait":1321,"receive":1080,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T02:56:12.791Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:13 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":85887,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"6a130610ae2d70f14857fbecc073f522","sha1":"991fa7c72b90f22452292e801bea28f50a8059c5","sha256":"01bc5eecdd81bb5f24fdac89843047fdca1b4cbb42e9a81da8677c17a012b597","sha512":"bb6600b252945bcbc4bc20c404133f8cd086914d499332d6f9a7913265f88ba57f11ad58931126406a17f07bc8955fcea65e43249cd1bd63410bad8e1840f2aa","ssdeep":"1536:O26YCkKNAq/pYvBSsnxV8Vsq/DuMx05dDpap19tfMcUG6:fKvxeSpB19Q","tlshash":"718330025576507b031bbdc53a794f8b74a3aa0edb271e087abc11e24bf0dbd4c9e855","first_seen":"2026-04-26T02:56:58.614443Z","last_seen":"2026-04-26T02:56:58.614443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4197,"timings":{"blocked":1295,"dns":1,"connect":1294,"send":0,"wait":1340,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?77279c5faf6215e854535dac98877926","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:17.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?77279c5faf6215e854535dac98877926 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11293\r\nContent-Type: application/javascript\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nEtag: 33fd34bf84d9d75f9d5d035db38bb923\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=63D8E31FE0DC343C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29899,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (623)","md5":"9e3366319da012321db5761847ac1575","sha1":"a53dec0485ff11accddace4d10b5985111596d5a","sha256":"582851f18892d68187cdda6767dd15d5b7509e0a84718d0727af88e283fc0a5b","sha512":"9845e11efcb3edd953630918e37d87ffd04c30230f2a0c582f2fd69df9e660cedcefb8ad7ac9586da372fcbc991b2b1c9be0b109b64f3c6e786bcdc67e3337aa","ssdeep":"384:N/JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:N/4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"8dd2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-04-26T02:56:58.617053Z","last_seen":"2026-04-26T02:56:58.617053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3335,"timings":{"blocked":1486,"dns":358,"connect":540,"send":0,"wait":361,"receive":1,"ssl":584},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A1X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.608Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A1X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:20 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"13f2a7275df800683616b57eee1c30cb","sha1":"6b0aaa7543f6cd24a007b6f9cf6452ed25766e5a","sha256":"e85a0966c7981d1976751bc49e92f54910624818309b2551090d4e7754c3a320","sha512":"dad87948dfc1bb431592d3bb201537620a96a4d13328240831cbeacecdc466892f2e64397af118699809dd739e75b39f36b698cb35764e7e2a92418fa7c04008","ssdeep":"","tlshash":"54312816ec0079c5a9d9dac331d3203b8b534d0042e140a3be8ee82395e63b61a454cb","first_seen":"2025-04-19T17:22:25.381335Z","last_seen":"2026-08-03T22:28:28.192992Z","times_seen":63,"resource_available":false,"data":null}},"time_used":6863,"timings":{"blocked":5535,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/css/media.css","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.571Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/css/media.css HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14435,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"790122b273caa56bdc8925ab8b82f030","sha1":"07357ec84f1fa790afd7294cdd86d78a3d3a9aae","sha256":"933df405f4bad03b3745a97dcb34d432a095252af0b216bf4b34bd3747d2ba13","sha512":"a7d98962539c9e2ea51104b65897595f70d9a126cb999154ab43767d2b36e294b9c01a615c5d3297132e9c3a0e39140f81870e680a669c0812ee862f32b96340","ssdeep":"384:MMuRsRBtKpKNnaciN12FvzsY/7IQxc20CKqdRfvdp4:MA0pk5RZisKeRfvdW","tlshash":"1b5200159760310ed42756bbfde37a3533895703f24368e286b02c1ddabe69c14faab4","first_seen":"2025-04-19T17:22:25.360718Z","last_seen":"2026-07-14T23:57:57.188436Z","times_seen":75,"resource_available":false,"data":null}},"time_used":1780,"timings":{"blocked":206,"dns":0,"connect":254,"send":0,"wait":1319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A3X.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.612Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A3X.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"69e56e7d70bff2a9eac5939745977bdb","sha1":"74c37477706b85f972d2c1446cf0bdc37b5b65ee","sha256":"fc8fa0c2cdbef55f48d4e367133c5a7c3a9d2fca8ad4bea8c171a1ba7dad0ec9","sha512":"7ab3de569ddb0cd641ab92b0a1f93034bbfc8b9dc73efed4b1feaafb825dad7cd103f1c7cdf889cb3adf1bc3b18c87d5a9cc5f4ce30b963e44676189aa6e49fd","ssdeep":"","tlshash":"eb21d858fb003dc2525deb8114f2807b7e220580dae0e1e25d8fc01966721fb0a588db","first_seen":"2025-04-19T17:22:25.307328Z","last_seen":"2026-08-03T22:28:28.193646Z","times_seen":60,"resource_available":false,"data":null}},"time_used":13883,"timings":{"blocked":12561,"dns":0,"connect":0,"send":0,"wait":1322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/f_01.png?v=0.1","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.795Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/f_01.png?v=0.1 HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 70, 8-bit/color RGBA, non-interlaced","md5":"727e65a0a1081634bc7c97a7b51db015","sha1":"84ad6989a49638d76c9c17519cff21ad31a48ccb","sha256":"f95e66a78e6242fdb7001d42f6386c366b81b313cc8d3f29a20d47ff2cf4cace","sha512":"572e5a0ad4906c344638cd07ccbd5ea8bf9bad965bc69045ccc037d536b3acf6b6976c4e56b425536e650317bd7662b1177a867199eafa857361e7a6a78ef038","ssdeep":"96:lCjmZpZsJJFJmagmK7shCwWKoWWBahCDPr5dk+Pxo8W1azP1rgBO4ipRg:2SZcHM6KwhCd5MhCzXVJQ8+2e","tlshash":"eb915d9eba44a402d618e7611ee7d627d88244d058a0f3deb086d1476c381ff9978297","first_seen":"2025-11-11T09:51:58.895545Z","last_seen":"2026-08-03T22:28:28.180824Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8391,"timings":{"blocked":7058,"dns":0,"connect":0,"send":0,"wait":1333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/icon2.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.511Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/icon2.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/public/static/portal/css/style.css\r\nCookie: __vtins__Ki3Am2Z8sqj2SDaC=%7B%22sid%22%3A%20%22317419c5-2f93-590e-917f-8501b6d805cc%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201777173977921%2C%20%22ct%22%3A%201777172177921%7D; __51uvsct__Ki3Am2Z8sqj2SDaC=1; __51vcke__Ki3Am2Z8sqj2SDaC=1771ab3d-09b2-541c-9d59-14660dde2acf; __51vuft__Ki3Am2Z8sqj2SDaC=1777172177927\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"51e83ca3ca5618b2c3da1de1f4cda404","sha1":"2bf128378e99478b1a01deee86d82f3d958a3623","sha256":"fb9ffef9dbbaa3dc176f8c97a7ad10baf418d7e530e26f37ed5f7c22588fc259","sha512":"686cd9923f97a4d52f8d69b3e402a47bf233c199ae50a07d0799f475e5cf55a5427d15fb8b74c582b4133a18c296ff2499f2024f27aaf0032830694bf56a2cb9","ssdeep":"","tlshash":"1821b61afd807a40a28cfa4321f754271f168d00d5c0e05aaccfc02f59b12ba891e6db","first_seen":"2025-04-19T17:22:25.338141Z","last_seen":"2026-06-03T23:27:16.127875Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2631,"timings":{"blocked":1301,"dns":0,"connect":0,"send":0,"wait":1330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A2.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.609Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A2.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:21 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c2fe05b879e3279a9700f2cba2987f17","sha1":"2c9721952e5f72f01d3362212e42863d28630703","sha256":"c245579fb422cc9a2397ace8e371ae6f05e155616360087eb7b83430d2973fe2","sha512":"47d412fe35e120cc8eaf2c9c59f354f6dd656f6d3c8eaa67d9a3d275add579ad9ea4642ff2a5a16980f25f30d55e7d9c5ed4b0ea544dbe6a6bb324ca3ed90084","ssdeep":"","tlshash":"d331c84cfb506ac1655dda8229e178376e724a80d284d091fdcfc42f2c700b585641e7","first_seen":"2025-04-19T17:22:25.316083Z","last_seen":"2026-08-03T22:28:28.203712Z","times_seen":64,"resource_available":false,"data":null}},"time_used":7140,"timings":{"blocked":5806,"dns":0,"connect":0,"send":0,"wait":1334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/B5.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.781Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/B5.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"0c8e8e3c61713acb5607dc54de06aeb4","sha1":"f46eb7f63e5d008d839933103dda473223156a68","sha256":"373c9f55852f0343a5603487353a89f8dbcc4ba59bac64f0025d6cec1ea7b107","sha512":"0a47b7d5e98f8efd9c6561137deae52cfc51787e72552807987116c7d82d1498038532a0ac6689e98a570a4c6a5d8d8e2b49da73b7ab09e69491443553fde5e3","ssdeep":"","tlshash":"de413d78695814801defeb4134f6907b6e954190e1a0d407bccbd83718b18f78a1d1c7","first_seen":"2025-04-19T17:22:25.398782Z","last_seen":"2026-08-03T22:28:28.184968Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9709,"timings":{"blocked":8394,"dns":0,"connect":0,"send":0,"wait":1315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/push.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.798Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:16 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 04 Jan 2025 06:32:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6778d5f4-58a\"\r\nExpires: Sun, 26 Apr 2026 14:56:16 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (380)","md5":"ad532b192efe82c126bcae5d448ad494","sha1":"1d6ef90026626b798c09f559d982b30fc3821bcb","sha256":"4d50d0fa188e4c86813ca1cf404c1d69d47d46eb219fcb13a1ea344b90eee8d0","sha512":"8575586ca242a184da4d52be01dda61555cd6bfe974e12900df35f6ae36329e57d78ce59ee3c7553f1509c9b072318d7bddb204b4c699fe7213496b1c6b4d4ac","ssdeep":"","tlshash":"97211dce946202bc16a310681abf38dcf2a9063bdc54e541f86ad0410fb4a3703a7ed0","first_seen":"2025-02-06T06:30:26.389581Z","last_seen":"2026-08-07T22:14:31.827768Z","times_seen":720,"resource_available":true,"data":null}},"time_used":2684,"timings":{"blocked":2414,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/common.js","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.622Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common.js HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 11 Apr 2026 03:30:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69d9c041-957\"\r\nExpires: Sun, 26 Apr 2026 14:56:15 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"c5af3c7676afd100cc984ba9f8c93a0f","sha1":"fcb6cf85234515bfa0379287b268ff6ef1510ffe","sha256":"6adc8e8357133acb3bf32db06b18269784af652211fb9def05f38d47f9dd4e69","sha512":"03e92b754a5dee76a7415997ffbf40bc258bc76bbc584d99797df9ae18056a4b430e73ce47a2fdafe2b2e67a901d32936b1f5a6f5ba7d03765707daed60dff4e","ssdeep":"","tlshash":"bd41a71e4d86a2789313213552faca0cb6bbc00b5706c94434adf5568f58fe54c2bfe8","first_seen":"2026-04-14T23:11:42.824344Z","last_seen":"2026-05-02T08:31:04.963525Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1730,"timings":{"blocked":1475,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-ud.s4.udesk.cn/im_client/main.279ba1cd.css","fqdn":"static-ud.s4.udesk.cn","domain":"udesk.cn","tld":"cn"},"ip":{"addr":"101.227.20.88","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1811089.s4.udesk.cn/im_client/?web_plugin_id=46589\u0026cur_title=z6mg%C2%B7%E4%BA%BA%E7%94%9F%E5%B0%B1%E6%98%AF%E5%8D%9A(%E4%B8%AD%E5%9B%BD%E5%8C%BA)%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026src_url=\u0026cur_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026pre_url=http%3A%2F%2Fwww.shoujunffm.com%2F\u0026currentMode=inner\u0026free=noAgent","date":"2026-04-26T02:56:24.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s4.udesk.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 20 Jan 2026 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"33:40:AA:BD:54:21:AF:AA:E0:29:30:D7:57:3C:EF:D3:1A:23:49:F2","sha256":"D6:AB:77:65:D2:D3:AE:13:58:BF:F9:90:83:17:84:FC:E5:C4:19:0D:D4:FC:0E:3C:2E:B3:A6:9E:77:76:6C:92"}}},"request":{"raw":"GET /im_client/main.279ba1cd.css HTTP/1.1\r\nHost: static-ud.s4.udesk.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1811089.s4.udesk.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ncontent-length: 96714\r\ndate: Fri, 24 Apr 2026 14:28:56 GMT\r\nx-oss-request-id: 69EB7E285C2AFB39354AB9AC\r\naccept-ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\ncontent-md5: JoGK2IniRU00snuKt2S/8Q==\r\nx-oss-server-time: 6\r\nvia: cache16.l2cn8428[0,0,304-0,H], cache6.l2cn8428[0,0], ens-cache14.cn9365[0,0,200-0,H], ens-cache7.cn9365[1,0]\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 20 Mar 2026 10:49:06 GMT\r\nx-oss-hash-crc64ecma: 18142829881473833618\r\ncontent-encoding: gzip\r\nage: 131250\r\nali-swift-global-savetime: 1777040936\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 24 Apr 2026 14:30:40 GMT\r\nx-swift-cachetime: 2591896\r\naccess-control-allow-methods: GET,POST,PUT\r\ncache-control: max-age=2592000,s-maxage=86400\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ntiming-allow-origin: *\r\neagleid: 65e3141b17771721860256888e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":369278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"26818ad889e2454d34b27b8ab764bff1","sha1":"b0284d43259e24c81fe01c274fec6af4a556d59d","sha256":"453cdc124d58575a063adc2f5fe8e061a87f1c06f60033b0d15ef1d2e63c139b","sha512":"ce0fc97d28dd4b523c49a9011d774d621e5c5a473a84b3709db89b3ecacff6ccd3cf81a9ccc800beaa136f18b18dd085191386c36a9cec52011c6ae08d927c12","ssdeep":"3072:Jx0KGJJE44pmAM8C2TL8WOXyTXfmhxoAeD+l4:JeZJE44pmAM8C2tOXUXfmhxoAeyy","tlshash":"64742931e654217d7237c62ab5e0bac63528d153e5630ffaf15b7268cbc52ca0673b0a","first_seen":"2026-04-02T10:02:20.55766Z","last_seen":"2026-06-01T19:42:23.386848Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3927,"timings":{"blocked":1492,"dns":741,"connect":490,"send":0,"wait":497,"receive":444,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/uploadfile/images/20260413/1776071426611369.jpg","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.606Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploadfile/images/20260413/1776071426611369.jpg HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-transform\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":257914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 750x495, components 3","md5":"5516591f1a0d48565a1f9723f6a6e9b1","sha1":"fcc448d64d3701093576ceee545393a6041d3479","sha256":"4fd156572dcadcbd5281d4fccb1f310803fb9cd96b8fec9ff2e515c888210923","sha512":"049edb1375afe49d977344181cd01b8fabaccd5576740db91b2943fc5e090b125cd8dd76c2212c8e494704b4b82102a3b0f8d6d2209a734a48dec03646dc8d39","ssdeep":"6144:ob0K5ZMdnhfErScPCXukb06OFtCI3zihRMsqtaMMd:Iihk6Xu206OFMktaRd","tlshash":"da44126187769c3afde92675d9f24b4417264328376390a9f06e9ce2f728702742de43","first_seen":"2026-04-26T02:56:58.643245Z","last_seen":"2026-07-03T01:37:56.617124Z","times_seen":18,"resource_available":false,"data":null}},"time_used":13193,"timings":{"blocked":10831,"dns":0,"connect":0,"send":0,"wait":1319,"receive":1043,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:17.937Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Length: 339\r\nOrigin: http://www.shoujunffm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 210 Unknown Status\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: http://www.shoujunffm.com\r\nAccess-Control-Allow-Credentials: true\r\nServer: TencentEdgeOne\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Sun, 26 Apr 2026 02:56:18 GMT\r\nEO-LOG-UUID: 14304496392230005683\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"Unknown Status","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":135,"dns":116,"connect":19,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hm.baidu.com/hm.js?f28a02745acacb3e2e3a396d5050f1fc","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":80,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:18.491Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /hm.js?f28a02745acacb3e2e3a396d5050f1fc HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://hm.baidu.com/hm.js?f28a02745acacb3e2e3a396d5050f1fc\r\nDate: Sun, 26 Apr 2026 02:56:19 GMT\r\nContent-Length: 94\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":1298,"timings":{"blocked":516,"dns":1,"connect":515,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/css/animate.css","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.565Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/css/animate.css HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:15 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":66752,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (460)","md5":"1561f1da3d758fe853c599c271cf1117","sha1":"c61bd1aaf3deb32cfb55b09aa0eb034646ce3717","sha256":"756daf39a232d6f4ead036a93171a5a319ffca4a720ab28a5e37794b935138b4","sha512":"8a8422e7d8cea12cf0aef6ae2c297dee05252acf55c4a58db305c510e2335105d5985ebc2e8a0689c87f6b6108f117d76d711252d0fdb27eb370fa705f25e7da","ssdeep":"384:dIWpvHfsQGWe4Lkwd+MteJQy+AWX/U1xZp7hcnAr1d3o627lDxeOn4j8W6+PAOFd:FO/kuZqfB4ByAwr+Cns7XXnixHr41eGh","tlshash":"966306999b90118427320d15cfcd5b784a3cb96358769cefb381288f9b55b9c23cb72b","first_seen":"2025-04-19T17:22:25.365239Z","last_seen":"2026-07-03T01:37:56.626072Z","times_seen":68,"resource_available":false,"data":null}},"time_used":1342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.shoujunffm.com/public/static/portal/images/A5.png","fqdn":"www.shoujunffm.com","domain":"shoujunffm.com","tld":"com"},"ip":{"addr":"154.89.85.206","port":80,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.shoujunffm.com/","date":"2026-04-26T02:56:15.614Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/static/portal/images/A5.png HTTP/1.1\r\nHost: www.shoujunffm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.shoujunffm.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 26 Apr 2026 02:56:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-transform\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 45, 8-bit/color RGBA, non-interlaced","md5":"c0d3471ba138e6340806801c7f6ff9d4","sha1":"5b0b8c54bd3540fba893cbb94504024259a6fb34","sha256":"9b357c4fa921deb8123b2dbb13cfe82cc39e1495ba1fb72d0b66e9e42ff38559","sha512":"faa1acb01a2445110fc2e0ba3a048c67c6e106b8389a138d90bf7ff32cf6a496c6cab2be0da9e8a0e7bc00e4c0b73c79dcb3cad2ae349444c67f00a073d2e66b","ssdeep":"","tlshash":"fa31c91af910e481516fda4324e60517ce13458099c5d066bd8ec43939b45fd496d8d7","first_seen":"2025-04-19T17:22:25.345642Z","last_seen":"2026-08-03T22:28:28.197777Z","times_seen":65,"resource_available":false,"data":null}},"time_used":8175,"timings":{"blocked":6857,"dns":0,"connect":0,"send":0,"wait":1318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-26","alert":"Phishing Block","trigger":"www.shoujunffm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-26","alert":"Sinkholed","trigger":"www.shoujunffm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}