{"report_id":"aba2a56b-1286-425d-be6b-a53375778fe4","version":6,"status":"done","tags":[],"date":"2026-03-03T12:36:49Z","url":{"schema":"http","addr":"yanshi.58.dajian.shop","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":0,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"title":"DEX","dom":{"size":1491,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1491), with no line terminators","md5":"d4b184693880668ae76d804bc86d3dd5","sha1":"05805ada0efe53d345fe679121f2315dc195a788","sha256":"50baf455bbbac2a4b9f78c55ae18e1104935f32029baaa6a25273d2ffc38afe2","sha512":"cd2d1648751b18094e2f787d20e5f3e03244dfe82375a501f76a26590fa8dc83a1331251ec2ac4655089ae7d993969454821608d3fe9e9a6e554b3985ff60621","ssdeep":"","tlshash":"0931e048dd08d5dd5ab05e5bea71b25d81cab90f6e71eca0a0f84a3c46a8bcc0652c02","dom_hash":"domhash8c9a1418b8c7dbbb1d54acef0b800d8e","first_seen":"2026-03-03T12:36:55.407648Z","last_seen":"2026-03-03T12:36:55.407648Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yanshi.58.dajian.shop","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":0,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T12:36:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T12:36:30Z","timestamp":1772541390,"ip_dst":{"addr":"8.210.242.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54892,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T12:36:30.139403+0000\",\"flow_id\":1029236664953798,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":54892,\"dest_ip\":\"8.210.242.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lengfeng88.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":6037,\"start\":\"2026-03-03T12:36:29.584646+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T12:36:30Z","timestamp":1772541390,"ip_dst":{"addr":"8.210.242.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54900,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T12:36:30.394122+0000\",\"flow_id\":1383949423984918,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":54900,\"dest_ip\":\"8.210.242.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"lengfeng88.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":905,\"bytes_toclient\":4662,\"start\":\"2026-03-03T12:36:29.835862+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yanshi.58.dajian.shop","ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":15,"received_data":4058792,"sent_data":12809,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-02-25T16:10:56.81418Z","alert_count":0,"request_count":1,"received_data":34000,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"lengfeng88.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"8.210.242.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-09-17T00:30:14.467686Z","last_seen":"2025-10-08T01:11:30.552652Z","alert_count":0,"request_count":1,"received_data":227,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","size":9648,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-19T23:05:39.524676Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/jquery.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84342,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-19T23:05:39.519023Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/clipboard.min.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d9a75485b02bab99313e76aa9630766","sha1":"1157f20c2452c9c777b49148b889486f1cbcb83b","sha256":"6a64628ce182e9613dd74c9e18eff447dced8a03cb1d90173da2865d84d18942","sha512":"44c8bef42fe7007c9b7bbb32057a5ea8e02f4b9e080b5b5f4e5e105bf98a9794672fa19f4b94ddfa431c01e9ea980db3a802ca6ca3c37a1b797f2e469774b8cc","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4Ls:FivWxeBI/vCc3kHiQ7l83JJu54z9K","tlshash":"8d32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","size":11039,"data":"","first_seen":"2023-05-31T10:27:16Z","last_seen":"2026-07-02T04:37:53.501819Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/layer/layer.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-20T13:15:29.631666Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13540,"data":"","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-19T23:05:39.521643Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/charting_library/charting_library.min.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","size":11901,"data":"","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-19T23:05:39.495805Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T12:36:27.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://yanshi.58.dajian.shop/dist\r\ncache-control: no-cache, private\r\ndate: Tue, 03 Mar 2026 12:36:28 GMT\r\nset-cookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; expires=Tue, 03-Mar-2026 14:36:28 GMT; Max-Age=7200; path=/; httponly\nserver_name_session=4668c09f3fc782f52fc812b2652508c4; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1556,"timings":{"blocked":593,"dns":163,"connect":211,"send":0,"wait":370,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T12:36:28.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://yanshi.58.dajian.shop/dist/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/clipboard.min.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/clipboard.min.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11040\r\nlast-modified: Wed, 27 Apr 2022 12:09:54 GMT\r\netag: \"62693292-2b20\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10808), with CRLF line terminators","md5":"7d9a75485b02bab99313e76aa9630766","sha1":"1157f20c2452c9c777b49148b889486f1cbcb83b","sha256":"6a64628ce182e9613dd74c9e18eff447dced8a03cb1d90173da2865d84d18942","sha512":"44c8bef42fe7007c9b7bbb32057a5ea8e02f4b9e080b5b5f4e5e105bf98a9794672fa19f4b94ddfa431c01e9ea980db3a802ca6ca3c37a1b797f2e469774b8cc","ssdeep":"192:k0i1RWxek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4Ls:FivWxeBI/vCc3kHiQ7l83JJu54z9K","tlshash":"8d32964cb28071b196db60ae902f424fb270942570ae90d4b639e8f5ad7ceed1567f3c","first_seen":"2023-05-31T10:27:16Z","last_seen":"2026-07-02T04:37:53.501819Z","times_seen":77,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/layer/layer.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/layer/layer.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 22117\r\nlast-modified: Wed, 27 Apr 2022 12:09:54 GMT\r\netag: \"62693292-5665\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22117,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-08-20T13:15:29.631666Z","times_seen":1269,"resource_available":true,"data":null}},"time_used":2956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":2145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9648\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-25b0\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9646), with CRLF line terminators","md5":"770b6e32570470374f29dba33e0f95b6","sha1":"64f6aed78e689c5b601946dab613c3678c558dab","sha256":"7da37ef86ad23b00dd959e0c189d29870cf99c2cd5dcad12634ed3961f69161e","sha512":"ecc5b498c8fd0edb1e145e6afd7e9f8cc98e65694b2670b2791f5af44bf0f5041bbd9cf119191f419942e7cbec53498127ddbdf0bb2b36391c8bc61bc2537ae1","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8L:xGegVrZLO3gyP6EhN0xhG","tlshash":"49128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-19T23:05:39.524676Z","times_seen":123,"resource_available":true,"data":null}},"time_used":3290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":2391,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/js/app.47a498cb.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/js/app.47a498cb.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 790389\r\nlast-modified: Fri, 06 Jun 2025 07:16:34 GMT\r\netag: \"684295d2-c0f75\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":790389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a0888157212ded718c63048adb015b3","sha1":"c2c50f03e37a5dc4eba3224030c8235e01805972","sha256":"34531cc57ae81f64e36e0bfbeb10a4bf8241d4f9359dca04716b3088f889287e","sha512":"b70442bc201ed514c845b617e5c67bd5c86bd86f5ee412d5421a1e80ac7399a1c4beca912b502ddef17f25221f3607b6403ab8b4988e6835d61adb76a6cae2d3","ssdeep":"6144:7ztP9fbtnGDdYDzGlTodfskDrzk5cY/0QBkoxyeW1kZeKg8dDfY9yivEE:7pRbtniYulktskD3k5csW1tAyJ","tlshash":"09053a5de58be7a98da7a051201e2258f3ba3dd6d0154085bf7dcec126ecc68630fb78","first_seen":"2026-03-03T12:36:55.429117Z","last_seen":"2026-03-03T12:36:55.429117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":9780,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/jquery.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/jquery.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84342\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-14976\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-08-19T23:05:39.519023Z","times_seen":253,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/charting_library/charting_library.min.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11901\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-2e7d\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132), with CRLF line terminators","md5":"38e628745bfe6be6bac3f336a6e806cc","sha1":"d58cb707ff7bab2304e888dc91d02fa260fd4e52","sha256":"dba3717e46ccf9687d725c825219349248e90bac7a805b5e77057863018c563e","sha512":"ea51203227931f43ad23c3d99061fb751a3bd5f9ed4cfb6aff31fb2a7507221b3f9d2741794297027c17a213e4138ebdc937b43fd08cd3809d1d9dbbf49634c4","ssdeep":"192:3gWbnhkcii1HMYE8qxwXTPDgFhQ+/JMH1aonM95si5Vp3830J13ndPWxPRnLYDML:9bhkclDkGVlu9PWVRnL00u3OH8A","tlshash":"f7323154fb6c6c3605c722f4c47f680b913ee27ad0a544ac38c491dc58fd446baabab9","first_seen":"2023-03-10T14:26:46Z","last_seen":"2026-08-19T23:05:39.495805Z","times_seen":137,"resource_available":true,"data":null}},"time_used":3200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":2298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/css/app.e8ae9e26.css","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/css/app.e8ae9e26.css HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 216655\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-34e4f\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58263), with CRLF line terminators","md5":"2c1260f252137366199f89deb3c25f9b","sha1":"c3fb55227b4c2677cd73fea96a43f89a6517fe84","sha256":"bc122d1331f80c8f281f1ae21caab0a8897afe6008e7299af4c9ee2774c360a1","sha512":"5f51e1a4088e336ec3eb26a1aec6ace1d61f97a8a7f008838aa352fadb93d0b3f23ec98116116f8c845c14f937f3c0c82ecb0546b5daf832b8df19f94b1b55d6","ssdeep":"6144:9kZLwg1sA/kiDT36yo5prSeZ0IT94eAujvr8YIwtII4:uZLwg1sA/kiDT36yo5prSeZ0ITzAujvW","tlshash":"d024b621b54c102ab577c266a4d4bedd3225e7a7e05206fefe813969cf836c63633709","first_seen":"2025-12-21T05:02:36.067455Z","last_seen":"2026-04-14T06:17:53.870098Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":2051,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T12:36:29.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/ HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 24 Jun 2025 19:15:24 GMT\r\netag: \"685af94c-5e2\"\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1506), with no line terminators","md5":"6cf12411388cd10b2c77603e2f7c882f","sha1":"c9937f37565598b8f95632e722b0843a3738e840","sha256":"fd42e4d5edf18762c7b4cb54cea069bdb7877393127da8605968a499a1b483df","sha512":"8f48b98f36b05826e33cabd3ed389205afb3d164562549fb1659a0b49a8a6525f61febbd48184bf125073c4ee9c2c57633386a110e266c535ad097232fe241f6","ssdeep":"","tlshash":"fa31e049dd08d5ec5a706e4fea71f65d81cbaa1f6d30ecb090f84e3c59a4fcc0a42802","first_seen":"2026-03-03T12:36:55.431888Z","last_seen":"2026-04-14T06:17:53.87985Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 13540\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-34e4\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13538), with CRLF line terminators","md5":"a6466bb5a15ac244de5626cc6d58dd7a","sha1":"2b799448750e1830e07bd2f89ae2d5f11fc95a83","sha256":"f9c9b8447d430ed9f3d69aca108c253fa5541a2fcc0a98e822edc28e3046a998","sha512":"413b0b8f0c194fd397afcdfbe54018830a885b66cff309dc900d7788d1dcadc389c75e3e93755c4ebae214d1c5f8abaa07885d22ad5fa447c7f66dcdba0924e2","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMJ:oBiWH4jZsDPA2PHyJ","tlshash":"7252a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","first_seen":"2023-03-10T14:26:47Z","last_seen":"2026-08-19T23:05:39.521643Z","times_seen":124,"resource_available":true,"data":null}},"time_used":3201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":2298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_dnypp4o56e5.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_2302506_dnypp4o56e5.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Tue, 16 Sep 2025 06:11:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 68C8FF9DB09677323028FF62\r\netag: W/\"DA266D30906B403389BB1C971C7B4CBC\"\r\nlast-modified: Fri, 24 Dec 2021 21:20:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8281916514372716533\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: 2iZtMJBrQDOJuxyXHHtMvA==\r\nx-oss-server-time: 21\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache29.l2de4[1,0], ens-cache6.se2[0,0,200-0,H], ens-cache1.se2[6,0]\r\nage: 14538288\r\nali-swift-global-savetime: 1758003101\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 31 Oct 2025 16:23:24 GMT\r\nx-swift-cachetime: 59147297\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517725413896604801e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":33094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26377)","md5":"da266d30906b403389bb1c971c7b4cbc","sha1":"7a5f12ded3a07d0b84a0aa9a425c161c7556455f","sha256":"072b3cae79ec33622136917427e7df44c9b8d8c1e59210e8e92cf66e916f16d6","sha512":"9d0b4dc7082db77f2e0ef1e5e4860867c291c2492a53921e6f089243ea5cc34d125ff2cc82d621485a5c8ef7470a62333ad1f58dcd20d83e4000dd4ed41ea41f","ssdeep":"768:gGHe/hPuLX7QHVX1jpc6Ic2lefYCG7f0tNI6:gG+ZPuLrQ1X1ye2IfK7q","tlshash":"dae21cf089bd2cb44758d1c12657a714ff18a6a98d8b5c4fe2a37d9ca7f72009093adc","first_seen":"2023-04-13T23:29:04Z","last_seen":"2026-05-31T17:49:49.190657Z","times_seen":165,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":102,"dns":35,"connect":21,"send":0,"wait":28,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/css/chunk-vendors.53736a38.css","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/css/chunk-vendors.53736a38.css HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 222635\r\nlast-modified: Wed, 27 Apr 2022 12:09:52 GMT\r\netag: \"62693290-365ab\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222635,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2012128d5c3a126813a199e06abcf4da","sha1":"64f9c0f0173b5659fc2453b3a9c4fb275af14ae8","sha256":"69c6b06dbbf9fdfc782ed52fbd138f01ff207781a2516d6157cfd015b1d329d9","sha512":"dbe9ac292e0fdd169aaba8a88976b6fac447323ae99a27a908fb31e4a1dd541955e7dd4b2ec0085ffcf6cc2dbee2d6127119850f11e834224ffbcc8e4f749eb0","ssdeep":"1536:j6vwSf65WCXkc28Y7SrW3YeWXA1u9w4HCe/l4qAgW9tMEr64A8O6iZkJgYu8e2s3:j6vLf65WCXklWo64ddmacQI3","tlshash":"9624a5109b172427622bdb6db4c0ba896f24c363d8735b3bfd95780cc6e64991227e1f","first_seen":"2023-05-31T10:27:17Z","last_seen":"2026-05-20T05:31:39.768617Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":2239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lengfeng88.oss-cn-hongkong.aliyuncs.com/down/new.js","fqdn":"lengfeng88.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.210.242.7","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /down/new.js HTTP/1.1\r\nHost: lengfeng88.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: AliyunOSS\r\nDate: Tue, 03 Mar 2026 12:36:30 GMT\r\nContent-Type: application/xml\r\nContent-Length: 335\r\nConnection: keep-alive\r\nx-oss-request-id: 69A6D5CEACF6C53233BC83B9\r\nx-oss-ec: 0003-00000905\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-21T02:30:44.257906Z","times_seen":18004429,"resource_available":true,"data":null}},"time_used":1992,"timings":{"blocked":848,"dns":33,"connect":276,"send":0,"wait":276,"receive":1,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/layer/theme/default/layer.css?v=3.1.1","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:32.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 14367\r\nlast-modified: Wed, 27 Apr 2022 12:09:54 GMT\r\netag: \"62693292-381f\"\r\nexpires: Wed, 04 Mar 2026 00:36:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-19T23:05:39.517697Z","times_seen":6823,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1015,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/js/chunk-vendors.75af32b2.js","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/js/chunk-vendors.75af32b2.js HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2635274\r\nlast-modified: Wed, 27 Apr 2022 12:09:54 GMT\r\netag: \"62693292-28360a\"\r\nexpires: Wed, 04 Mar 2026 00:36:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2635274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"394718ad48a721765a8497c310ff6e33","sha1":"8baa2c8e3c1f74b1de931229f9d2bc8d2e1bfcb2","sha256":"190bb742bd382f6645664503e018fa24257da52a893f38ce92cd1e6722d9a868","sha512":"1b08efaf9f4d13c506571f2bcc043e3ccf66eebb4d37ea37ac77eac35ed12b3031bb317c7feb92d8ddee5b3893318c412799163bd7552784f3c34160ac2b004d","ssdeep":"24576:Rh4PM4zbM2uU0Upkf82JrY9/JxaC+A2nLdMhA:Rh4/z42upUpkf82JrY9/JxaC+A2nLdM+","tlshash":"e8254cdd72a47025539335b1006f140ba33b68496809c568ba29e4dbbcbd99e733bf7c","first_seen":"2025-12-21T05:02:36.068542Z","last_seen":"2026-04-14T06:17:53.900652Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":16981,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yanshi.58.dajian.shop/dist/favicon.ico","fqdn":"yanshi.58.dajian.shop","domain":"dajian.shop","tld":"shop"},"ip":{"addr":"103.39.109.47","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yanshi.58.dajian.shop/dist/","date":"2026-03-03T12:36:35.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yanshi.58.dajian.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 08:31:14 GMT","end":"Sun, 31 May 2026 08:31:13 GMT"},"fingerprint":{"sha1":"A9:8E:09:C3:D8:83:D0:E5:62:C6:9F:E1:0D:B7:D6:E8:12:E0:29:15","sha256":"1A:AA:B0:08:14:C0:8D:63:CE:40:E2:EB:03:1C:3C:B3:7F:64:0B:CB:92:8D:B3:17:EB:CE:FD:71:09:C6:A3:BE"}}},"request":{"raw":"GET /dist/favicon.ico HTTP/1.1\r\nHost: yanshi.58.dajian.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yanshi.58.dajian.shop/dist/\r\nCookie: angela_session=eyJpdiI6IkVQXC9TZkVoWVZYbGJrOUhuSmpBUDlRPT0iLCJ2YWx1ZSI6IjBWY3pQSnB0TldNd2p3Vkp2YUNMTXp5aU5HT0hMWWxPNjEzWUdHang2UU00UU5aM1EyT2dKUzRjdEdFa1doOUd3Y2lEclhkd2k3V1MyXC81dVh6c1hodno5RkswcmEzM0NPYnF0SE96bmdLT3p0RXpTdVI2WTFkem1tV2ZBdzJEeSIsIm1hYyI6IjNiZWRhOGQyYjJhNmRjODlkOWUyOTc0ZmQ0YmQ2MTg5ODk4NjM2MjkzYjk1NmZhNTc1YjNmNGZmZDZiNTcyNTQifQ%3D%3D; server_name_session=4668c09f3fc782f52fc812b2652508c4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 03 Mar 2026 12:36:35 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Wed, 27 Apr 2022 12:09:54 GMT\r\netag: \"62693292-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"5cd77fa13aaad129df086c9de12fa0bb","sha1":"83ef47ec9f91339decadad67e404df90fa84605f","sha256":"0c2074d0785167df7867b48e7124b4165de391eda547f1214159a34ec2de849d","sha512":"2305e0a50de960bbf91b43f3c8231b63849a227b92d8550cebcb31ee74a2dd958ffd61ae54e94b81c058510ac0ce467c4e317799d9a944dddb96db1ae47bcea9","ssdeep":"192:rIzBT4H4FRU9CsFpEtyAMAFTNNH4PsvCD+o:WK0RkGtyAMA1OND+o","tlshash":"1a72ea9f7f0597efecb81cf8debf9a0458680d029a3968f0e780b54f94728f1665510a","first_seen":"2023-12-05T10:09:15Z","last_seen":"2026-04-14T06:17:53.872857Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5021,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":879,"receive":4142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"yanshi.58.dajian.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"yanshi.58.dajian.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}