{"report_id":"ad7734f7-2fdb-4f88-b23f-18ed7205c184","version":0,"status":"done","tags":[],"date":"2026-07-12T21:57:34Z","url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":0,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"title":"夸克AI智能浏览器 | 搜索、网盘、PDF编辑一站式工作台","dom":{"size":19336,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (498)","md5":"8bc9b1b7ab116947717e4d433b411cb1","sha1":"23f24c7f138c097656dbc691b6c7014455ada333","sha256":"70d7cae6c8ad25585d51ad0ad6c8e0158c9d7bd388508dc140ce4aec2f6d007e","sha512":"1c79ec29f5bea8c6c312f75da9eb064bab602c743b6cb0a73457d354d17a62f13a32af951e60c859b8b3bd61fbb8bb101b0527d77286d795f6a23720e7694220","ssdeep":"384:oOXKLm4Ezz6JAtOP5ZhTJYwC5IM03o5Ju0f:o6Wm4czPgrKoM045Ju0f","tlshash":"35920763b0e0203a2437d2d62ed5575e3169d403c92b4b9472ac85ae9fc2da70e63b4f","dom_hash":"domhash85b1446d530912c075d15f119e84c8d0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":0,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:57:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-07T13:00:30.828297Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uc-quark.com.cn","ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-13","domain_rank":0,"first_seen":"2026-07-04T12:46:36.375706Z","last_seen":"2026-07-04T12:46:36.375706Z","alert_count":28,"request_count":14,"received_data":17324150,"sent_data":7180,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"fff88b621f9b76a4e77c7fc91b7423a2","sha1":"075090cf43f93805b8e68e35d296c45c4c379596","sha256":"5fb4eb06d2dfce8b96d2c6ea6b1137361a3d30c9633a1d5e4d21eaeda9a32046","sha512":"9d10136713ae0d9ff099a02af97623937dc187dc7afef6c61f233ca52a4b309b58367f9d5d4cd7ab2c03e3d87804dbfa3694ce9da12982acb53074fcbc68c80b","ssdeep":"","tlshash":"d121cb9ffd6035be48b7a7b74b9f178437370042088586113ef494c41fb4a8968a2ee8","size":1177,"data":"","first_seen":"2026-07-04T12:46:42.20047Z","last_seen":"2026-07-12T21:57:38.736177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f7e8b0c2a974ecc1c6d2f6c5f3133f1","sha1":"4a19880804cf0a7d8bdb9ef7d8f8654d285a1404","sha256":"f441fdbcbeb6ed6a4e0fefe5c5653e9ce05a9a490d7de436b18174a0e70faa65","sha512":"bae4fdcd40908de464e562086b1c8f23be4b6dc5a797150d97d0892b1770230922f51b0b3e0c3c64cf7e44857d6c325af8c66c8e8e0baa7b448f349a39b49da1","ssdeep":"","tlshash":"8090020a047a0403c1a4012ca91901c10063854041164208843cc8c0ba4c58ae00f103","size":54,"data":"","first_seen":"2026-07-04T12:46:42.201407Z","last_seen":"2026-07-12T21:57:38.73766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.914Z","timestamp":1783893419914,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T20:40:26.543952Z","times_seen":17322800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/ios.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.921Z","timestamp":1783893419921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/ios.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de7-aa57\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43607,"size_decoded":42961,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"e1b466fc35df30cfd3ca8755c7597040","sha1":"7733463bb17b7b714543a750e9dceffab8c6597a","sha256":"5cd2fb15772c8659194a182d945ba0f24e3f538285423405ff4c98613d4c622d","sha512":"d4be0a31c49cbc0ab4b6841d18707bed90b68c7f007af3f2a92f08b3affb74b9887521de76b20a4e9ee1fd07b4d50a8c63c005de12dec0da460df3ec70c3bc11","ssdeep":"768:azwuw6iyNCfctHWJHZTHTafCTJz8eaI4uZy3tPFdCBKmlQu37f6X09:aED6zNptHWtJpTJz8u09P+lQC7f6XC","tlshash":"0b13f145ef34ba6ee833be681ff68414fda6f62c074a48ed206d36a64516bd1388013d","first_seen":"2026-07-04T12:46:42.189649Z","last_seen":"2026-07-12T22:26:40.293957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/kuakewangpan.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.926Z","timestamp":1783893419926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/kuakewangpan.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de7-d60c\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54796,"size_decoded":53435,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"1cb2de587ffb324a35738b647856edaf","sha1":"2dc597920fb69684aca32531fa25cba09467da63","sha256":"6c64d5ac191f35353d7b75f1cbe96fa6e62388ad846e3dd81809605cb5b8f637","sha512":"f3b78d401757c8a40cf5e0d1e6aeb021d229ad7f2d3c8c0ff2d2fbcad989a1d522366e4f278500a5c090e4c578cb854f381fce9066570ebd085c6e5c90d75082","ssdeep":"768:Tt0AAtu3jJQ6laFpT6ADdnjuY8iuvRRRgsVMupD7kwu+0LNUG/n1VOuNxi2SBwhh:utSjaFBnDQpRPV98+0vvO4xiPwbGg3","tlshash":"7633df265182b5624f3069f0c50754f8df303cddc569260e187a267b3c9b38e8da75eb","first_seen":"2026-07-04T12:46:42.193204Z","last_seen":"2026-07-12T22:26:40.289913Z","times_seen":4,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/222.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.963Z","timestamp":1783893419963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/222.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5346337\r\nlast-modified: Sat, 13 Jun 2026 12:32:37 GMT\r\netag: \"6a2d4de5-519421\"\r\ncontent-range: bytes 0-5346336/5346337\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5346337,"size_decoded":5346585,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"88a62085b5cd3815bf82acda03edb260","sha1":"949953780f2e1a9176871b9cfa6c7fea6624591a","sha256":"8ccc05e096e2645cd09adcc1c5c535c4740e48ba2ca8fabde6890e4580d5dc8e","sha512":"e337f33652af4041c9476d13eee11b5633f34209c9b4fce0e3606befb7e6c75943a9c921fe759b3174d9076e5d2ed1d64f6f77e13a09cd54b2df12f34bfc589d","ssdeep":"24576:HrEC7lOr4ZLMNkDxWbVB0VuBka5UtcS93kpiDr4n7Raxv+v:44Or4ZtDxWT0pa5CcKqyrC6W","tlshash":"ad2523b78bc60b16dd3402b1e06f97627be9f22d4a2f47d78510b7e4fa14a548e807b1","first_seen":"2026-07-04T12:46:42.198399Z","last_seen":"2026-07-12T21:57:38.719496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":2334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/444.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.968Z","timestamp":1783893419968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/444.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 877892\r\nlast-modified: Sat, 13 Jun 2026 12:32:38 GMT\r\netag: \"6a2d4de6-d6544\"\r\ncontent-range: bytes 0-877891/877892\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":877892,"size_decoded":878136,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b65d64746b15c6560958dd5ab3c8e6b0","sha1":"41c1be144b061b0a761d1b6b8261e9b7bc03d0f9","sha256":"39f089021752ad4226c5769131335997a3a1d158228997b5e934762871ba5d31","sha512":"2064c64501ec92e8efa9b99e23afa13e474149bd388226ca4b7151c5bb5078790b283030ba9f4bffe819e1426c026e1e1110402344c8148d523b00545cb1eacd","ssdeep":"24576:GYxrc8vldwRWzTZpcDEJrP5S291U0omPFvEMip:JrHGW3WWrI2E05PFap","tlshash":"391523cb23d0b641c6bc85b093aec7947762f1a5db1e4fc3661289afb402d5c4a38667","first_seen":"2026-07-04T12:46:42.199543Z","last_seen":"2026-07-12T21:57:38.721961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":749,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/555.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.970Z","timestamp":1783893419970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/555.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1839577\r\nlast-modified: Sat, 13 Jun 2026 12:32:38 GMT\r\netag: \"6a2d4de6-1c11d9\"\r\ncontent-range: bytes 0-1839576/1839577\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1839577,"size_decoded":1839825,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a9f17481780e0207f7bb5ae699e606d0","sha1":"977b8e444066906864f5093f7ed0d56a3f6d6b7c","sha256":"1b53d18d3496dc16f2de871faccc2233b253a7f2af0e69ad2dcb715362bfd1c9","sha512":"fc3988ab14a9580312f2d97a98aa81485f7898b91450fd18c6306a1efe6e5f3bcc4a16b0f6ca9cdb8a0c3ba0685be46c13c8ec55330ee5be743dfbc146f9376f","ssdeep":"24576:iCX0lZyXVUSXwUjlDxOcfbLq1quswzldzvmWnPSDO2r:ip7wVUSdjZMt1q1wTzmWqDO2r","tlshash":"3925331a03312124da549f7ece23c3073767e7584b6ac3cba351b54ab520999d8ab37f","first_seen":"2026-07-04T12:46:42.180503Z","last_seen":"2026-07-12T21:57:38.723959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":1010,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:56:57.431Z","timestamp":1783893417431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:56:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 12 Jul 2026 13:19:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a53945c-4dde\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19934,"size_decoded":6887,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (492), with CRLF, LF line terminators","md5":"8128c5689a5cd723ccfc38efe16ba94a","sha1":"97d4d6262458c916fdc74f2c107895f8915e6692","sha256":"a2b8d878d1e0dadece4c5bc99a6d52b6c28a7641097cdfc70320d94e096bc6e3","sha512":"2d34a2d7f5e856bc9875f818018677db61b9384527ecb6906b2c8ff3fd9188232554426439a4b40685c9aff1ce229cf44b74cea6e8ce65e5d24323d3023e3874","ssdeep":"384:NOaEJmBvod5d1A9ep+Lt1yimPfJ4osJIFG/BBG/:NJEgBAdN/+Lt1LmiCFGZBG/","tlshash":"cc92092275c030262533d1d66fe0579dfca9c003da170f9475ec969b9fe2d560e23e8a","first_seen":"2026-07-04T12:46:42.182846Z","last_seen":"2026-07-12T21:57:38.72555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2222,"timings":{"blocked":-1,"dns":989,"connect":246,"send":0,"wait":489,"receive":0,"ssl":497},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/pc.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.924Z","timestamp":1783893419924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/pc.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de8-a761\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42849,"size_decoded":41653,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"530e0ce51e74158f210218f28933d1ad","sha1":"ec68bb630d39bf489552d57510399fecee549cc2","sha256":"67957d5221ddc42fdda46264ffb34738860d5ff02b8001b9f376a83e9766d2ea","sha512":"4e964821627bcc5066ea9b81486c56455fa5ac787169c5a71065fc624b4eea3e524e14d4b012539e7024a1721d5b1044306f7cd47d6c61811e18c5663ccaf61c","ssdeep":"768:eqIIdjdtvyi8IMvzlMp4VhraGyA+IGq3Oi1Qr7sUv+B7P7h3cjCZ:TIydtvh8jvRMp4TBX4qeaQrAxl1n","tlshash":"4313cf719ee9b55a08b572f1e02701f06f0e72c2ff5399ad8d6b80743c6b45e1c066da","first_seen":"2026-07-04T12:46:42.191575Z","last_seen":"2026-07-12T22:26:40.288813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/liulanqichajian.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.925Z","timestamp":1783893419925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/liulanqichajian.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de8-da72\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55922,"size_decoded":54418,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"56ac854f13b1555afe37593b063505b7","sha1":"2c22e4869e4a3cf1e4c953e53b4afe4c556c1057","sha256":"40bef63004bbc47d6f52b0e87727f112e214aadc17ccdbe4335384b4c72ffcac","sha512":"a53400518056e4ead1e18b962afc4f52ea8bfb5511b59eddf55b79e704768320f43649af0c45f40c7e0adb0df6b8e0174730793c18803a51bc5f258d51eae8e1","ssdeep":"1536:fzMvpr5zh2b1szpXUJxGFb7XF8J8dHsWe:folZh2QerW/XFpdHsZ","tlshash":"d843df38abcbb5b3643897f1d31341b14e3f7190da94492aa5cf4662bc472ee9d0e8c5","first_seen":"2026-07-04T12:46:42.183778Z","last_seen":"2026-07-12T22:26:40.287094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/111.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.961Z","timestamp":1783893419961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/111.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 8377345\r\nlast-modified: Sat, 13 Jun 2026 12:32:35 GMT\r\netag: \"6a2d4de3-7fd401\"\r\ncontent-range: bytes 0-8377344/8377345\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8377345,"size_decoded":8377593,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"399ef1c00424fc0d7798dd11411ee076","sha1":"e4ec2ef826ada5d04fd79891c72e550a716d15fb","sha256":"702b97e3fa6c6b5ede5b9cd66abe67355f924b09c03242e8cc4dd39e6cee2cdc","sha512":"d4b9978bc138416b5c8406f37f147c1bec81a44375e8ba5fff27b6055aa05d5b7e89951733974a76430582f595f83ed95774fd8fb97b83b712d056f68929bd84","ssdeep":"24576:YzImqchNhqre49zqbKcLYYoVDJjB20uywfHgVW3:Ntchbqz9m5RmJM7nAVW3","tlshash":"c625232767b73845ed550fbe4ca7c31073e6c00c4b56a3a75b68b6cefe6124089893b6","first_seen":"2026-07-04T12:46:42.194563Z","last_seen":"2026-07-12T21:57:38.728909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":1971,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/favicon.ico","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:57:04.203Z","timestamp":1783893424203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:04 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1214\r\nlast-modified: Sat, 13 Jun 2026 12:32:14 GMT\r\netag: \"6a2d4dce-4be\"\r\naccept-ranges: bytes\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214,"size_decoded":1441,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"34d71031511dab829311aa628d52f7d1","sha1":"d685f52e8543c61eb503d201e75bad48b8189571","sha256":"84dde475cdda3a002c02fd9bfe1000ac4b26f2ab84ec3a6e41a99ff7ca3bad71","sha512":"c080a527e8fe2a25616c838cf7fde0ca5f34753adc53b7db1290008ff0d0dce9fb6cef995613c5ebab7aa319d9aa6687a6e68a1b47534a0130981c4e94d84ca5","ssdeep":"","tlshash":"9521ea83f3658d34c27dd65640b34aaaf024a450156aea691f182f7d9314b5b4ce0b22","first_seen":"2026-07-04T12:46:42.181746Z","last_seen":"2026-07-12T21:57:38.730204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/ipad.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.923Z","timestamp":1783893419923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/ipad.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de7-71cb\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29131,"size_decoded":27802,"mime_type":"image/png","magic":"PNG image data, 440 x 364, 8-bit/color RGBA, interlaced","md5":"4c84e24060df47f077fdfa2a716d1e48","sha1":"2411e5c2ed08b5ee55ae45e77ddfbeb6191e8017","sha256":"ef8c02fd0862076719fb0fc49d0ed4840e76e09f162d4d2ea00a4751ad9b6b5e","sha512":"888d529fe2a861c24c996d36a9061efd4e6a99f67fd56b2440238d080b367add26f60105d7edd1b25a7439d6298d6bd2e4c7c9c4ef2dbfb61261e78fc0d5362a","ssdeep":"768:3VKsy5Dxwne57ehDnKbnQ4GYJB7wK16PJR:FKJ511eln+JBJCKWR","tlshash":"b1d29c4006aa7fdae635da1a4c0f1af0827425dff30fd09d06696ba5fc12a0f947f165","first_seen":"2026-07-04T12:46:42.197539Z","last_seen":"2026-07-12T22:26:40.28575Z","times_seen":4,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/logo.png","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.919Z","timestamp":1783893419919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Jun 2026 12:32:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d4de8-554\"\r\nexpires: Tue, 11 Aug 2026 21:56:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1364,"size_decoded":1590,"mime_type":"image/png","magic":"PNG image data, 142 x 56, 8-bit colormap, non-interlaced","md5":"82242a10f49ace8b16531a7308145774","sha1":"b74e922685fa6ee80573ebb6a7f21b89925a7bea","sha256":"b5b95cf284a8fb23a6cff192b710f32193817de556e3a307cab46a0820b6e897","sha512":"32cf047527a3655babb150211a1125c518a04199028dccad759558548db12a913550aefcc8bed0ec7bf7f451fe00c9e54358359faa91b157ef06baa0f5737aa7","ssdeep":"","tlshash":"cb21a5fd9dce98fab7d142a318f39980f6842270e01a851da2c6688c48673b47552363","first_seen":"2026-07-04T12:46:42.196613Z","last_seen":"2026-07-12T22:26:40.293215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/333.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.966Z","timestamp":1783893419966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/333.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 194915\r\nlast-modified: Sat, 13 Jun 2026 12:32:37 GMT\r\netag: \"6a2d4de5-2f963\"\r\ncontent-range: bytes 0-194914/194915\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194915,"size_decoded":195159,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"82aea736ff63e4e395a6a2e165890773","sha1":"02ca302e8a533b096fad988411801aad383c6053","sha256":"f5c887c2c8882731357a8fcbcdf926254d1c4883aacbc22fc9afc3f6eab578f8","sha512":"e419fecfe61f4665279e25a09b588d260c2920028e8c1194ad267419acf9d5e62bf79ca5a92c5759dd7c92c0b987e695dacb96ff8929abaa1adb3001f37f79f6","ssdeep":"3072:sqy/9loKq8bevp85F13orVu/uB6rWDGjjZ/tPo+mTbErGMm9Db6WaRbXyS:+XHq8beqdIPB6rWSjFobsm9HS","tlshash":"c414124b4bcf7425c9bc64b1d70e0a4ba396f6bc490ad7cb56603dc5c8a32916e363b4","first_seen":"2026-07-04T12:46:42.195622Z","last_seen":"2026-07-12T21:57:38.733577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uc-quark.com.cn/img/666.mp4","fqdn":"uc-quark.com.cn","domain":"uc-quark.com.cn","tld":"com.cn"},"ip":{"addr":"203.168.129.179","port":443,"asn":9513,"as":"HK Cable TV Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://uc-quark.com.cn/","date":"2026-07-12T21:56:59.971Z","timestamp":1783893419971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en-quark.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 11:51:45 GMT","end":"Fri, 11 Sep 2026 11:51:44 GMT"},"fingerprint":{"sha1":"16:F8:F0:1F:BB:66:00:00:29:03:77:88:05:C9:1A:6D:0A:38:1F:13","sha256":"D7:83:F8:E1:D4:59:D2:3F:57:D0:B5:C2:54:15:42:6A:9C:55:A9:32:3D:B3:DE:34:CF:0C:44:C6:1F:E0:B1:B9"}}},"request":{"raw":"GET /img/666.mp4 HTTP/1.1\r\nHost: uc-quark.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uc-quark.com.cn/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Sun, 12 Jul 2026 21:57:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 435523\r\nlast-modified: Sat, 13 Jun 2026 12:32:39 GMT\r\netag: \"6a2d4de7-6a543\"\r\ncontent-range: bytes 0-435522/435523\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":435523,"size_decoded":435767,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f4246be6204c4c45354f47fd522d0e12","sha1":"3319c973d074e854bf9a5f313ea0b1aaa6791851","sha256":"b4ef7e3cf0af3feedbfb98597e8f0f317ac6cb4eda40277b080b3daf85845abe","sha512":"83fb88f7a4eccaf41b6106b7f4bd8bd291cd28fefc6da7a78943fe81b9c65601610436bc11f2d76cf0410f6817411d6dd86f463821251a88ceaabeb5e4194a7a","ssdeep":"12288:Tumqx8NXCu+4xevivQfpQLBtqUgAP1JZj:TumIACu+GkeRhdTj","tlshash":"729411165bfa66c7f974273ced3bc780338a9a0a0b84e3e317a23545f8706d1c9e5984","first_seen":"2026-07-04T12:46:42.184874Z","last_seen":"2026-07-12T21:57:38.734583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"uc-quark.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}