{"report_id":"afdb5786-de5e-478f-a29e-a23bed389e5e","version":6,"status":"done","tags":[],"date":"2026-05-22T02:21:50Z","url":{"schema":"http","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":0,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"title":"产品介绍 - 恒益通科技（深圳）有限公司","dom":{"size":23342,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435)","md5":"2c1545a4d545dd36fe959664caf3ce8e","sha1":"8eeee13c22afec29db048d2d80dd534adcaad29e","sha256":"951386b048bf149880819ace74667d71854777376272307dfd8af183adff6721","sha512":"6aa6134c3d007143e558d2f423c81987459caadefdd286e2376ab350896366b7a4f418fb54b374dff9f93b66b3e0e25cc04de4bf8e7505ab4919f10387d45150","ssdeep":"192:L+Yxhukm+m9EWynx/9ZnFvUHA/1yNh/AODUABGfA3EFmAvVWYcqfl40Cqfsm6It8:LiEWynx/9ZndUgHeHJWNW+AIf/4","tlshash":"e2a21e006fe8360e6512c174d3a05edadbd0842b97264e18f92e647faf4da954c2f7bc","dom_hash":"domhashe84d313b96af7c8fc22f39ae2d5489ce","first_seen":"2026-05-22T02:22:07.326646Z","last_seen":"2026-05-22T02:22:07.326646Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":0,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-26T02:21:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hengyitong.com.cn","ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":16,"received_data":176022,"sent_data":7580,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"ia.51.la","ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":696517,"first_seen":"2017-10-31T08:01:51Z","last_seen":"2026-05-22T00:39:29.080462Z","alert_count":0,"request_count":1,"received_data":189,"sent_data":799,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.users.51.la","ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":746636,"first_seen":"2012-05-30T15:10:11Z","last_seen":"2026-05-22T00:39:28.760809Z","alert_count":0,"request_count":1,"received_data":5616,"sent_data":333,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"hengyitong.com.cn/js/showimg.js","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef6318187a6745f19e89f0c0ae2dc404","sha1":"3cb88eb5bda082158bc2991e6563f077f7732299","sha256":"3b57f6f8563333da9ff732e87470fb73d3a9368993099a5e0aa9751206ea07a4","sha512":"31daac5de3dd09587a25c2b2d947fa11e9cae6565324fa86a385527a5c63f58e9d69966ec5ef46287d3e034c29f52ba28f19884d8095911057042cf4381edbf3","ssdeep":"","tlshash":"821129197a80e4b2053352c8ba42404afe280a23252971f77cefc2cdbf75355b694ba7","size":886,"data":"","first_seen":"2026-05-22T02:22:07.367278Z","last_seen":"2026-05-22T02:22:07.367278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d0b2c03ab6db7c6829c3580f4c5d7b0","sha1":"69ce9aa8430067f3804a054b6688072ecfd961b7","sha256":"dacf5bf6ec2c32c63cf4b102cffb76fc590251b41619fd281ad2a3599f9896b8","sha512":"f251bc973a77dbde7c05fdcbd72fe05da3afd00815215ae8b9bf0f654f86d39f6fee94384e67e90e05dac777ad899791ba4a5ed81be655a44890fc633c520b90","ssdeep":"","tlshash":"bbf0bb86b76fdf30259bc6680d4b072670797839cdc0c10d7c7d84f45066d6a1405ddd","size":513,"data":"","first_seen":"2026-05-22T02:22:07.381833Z","last_seen":"2026-05-22T02:22:07.381833Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"js.users.51.la/9277739.js","fqdn":"js.users.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c934addde54a06521031ce21e1291324","sha1":"f2400ed0d0792e622cafe3d6a932cd1e1548b7a0","sha256":"712a3781eaeaab4327ae1426e1626644155bd00f78d699a37b8ab7da8560788a","sha512":"688274471d5a8ffc84ad14a2122c5d533828e2ec1ccd0d1255ebddada832877aa875ff43f32d2e7436ad233490614eed985fc0e7b39a788b2baab85f73b1f39e","ssdeep":"96:LIyHmPg4EY5Qc1dnqW7aUWp36QXiWgQ95qEIopwm3B5fXOiDgCQgeKrmpj:LnmPZEY+cRpeUS36QXiWL5jfpwQXOiDu","tlshash":"adb1b54e70e2b4a247d621b9512f650ff1786a20589cc590ea63e8f43cb45af4333f6d","size":5205,"data":"","first_seen":"2026-05-22T02:22:07.370682Z","last_seen":"2026-05-22T02:22:07.370682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"055fd037fac90e8a6470e23429ecae2c","sha1":"f075efc41cf15a8b462a190826bdd7ec3ccf5988","sha256":"351461d100e3dae92122085ec2d7b95e62b7bfb335df4026c9214e7d3af55b50","sha512":"56f137bca884cf205f7ec5b036d72b6fcb20d104ac2716bbef38ca64717ca82335dd6d1d0283c6d9f3cbbe6ddd75e119b9f86df06a6d7c03d62698d1d1f5a63f","ssdeep":"","tlshash":"20d02b11c6564194f0208897f5d1b76d2045454a98c30720e485673ca5c72a63202309","size":257,"data":"","first_seen":"2026-05-22T02:22:07.384215Z","last_seen":"2026-05-22T02:22:07.384215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"hengyitong.com.cn/images/pdf.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/pdf.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:26 GMT\r\nAccept-Ranges: bytes\r\nETag: \"fa3b75123ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 13592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13592,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 30x35, components 3","md5":"ed5544baa635385e63b91de8a1f341fe","sha1":"42a948197e7a7f4a8e9a957d6d2c9c651bfdc625","sha256":"80b43ce9d5f7759a9c4a205cee8577221cc45e9793c0a69a65c370dbafd435ab","sha512":"9836669bfba3edd662dc8b61856dc87755c83ac91c59e4412d407ec0a3411d10e912258a4dc213d90e43364207cc3658f6990af58bf0d0d4d73336082037611b","ssdeep":"24:/K1nqSWuZDv/SADMpRcFZlTkISmiaNBuRCTP9rSTfg7qknL4fQxaNHc0syXvzqZU:QqzcvLrZkIO3RCTb1haNHdsAqa2bw","tlshash":"1b52a40a5ca272c2e6da5db339e828359c17060394c0ed4176ed8db66f043f21d2f69f","first_seen":"2026-05-22T02:22:07.333874Z","last_seen":"2026-05-22T02:22:07.333874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":258,"dns":1,"connect":151,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/LOGO.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.159Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/LOGO.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:25 GMT\r\nAccept-Ranges: bytes\r\nETag: \"335837123ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 60171\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":60171,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 696x134, components 3","md5":"84abaf58c4ea2b02b9f0628b0d5d90e0","sha1":"232709e6823cb99a3e718f7b96c9af31227b42b8","sha256":"fde3f974de4803c3cabdb584a9d105a178417cc8a34771131b2c453d19fbb695","sha512":"792ed5be86286e0fcfea15d6c34d1538d50c6eb9e3a47e8956a5c0047abd7d7b7899b361ed1053539973b3b6195ca6a7ab15f1c7cc58e9fb2b56861206b13ea4","ssdeep":"768:+uO4vHoeD2y3vbEiiprCOyFxJYRUReqPJL5QXzOuGMpppppppp4:+v4vHoevvb24DGVqPGiu4","tlshash":"6c43e0e381b4321ab13576bb685a7adb03e06e6722845d50f16f82f73f84f463e16076","first_seen":"2026-05-22T02:22:07.337189Z","last_seen":"2026-05-22T02:22:07.337189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":155,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/classBg.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.158Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/classBg.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:19 GMT\r\nAccept-Ranges: bytes\r\nETag: \"3d8b3ce3ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 14002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":14002,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 204x34, components 3","md5":"e2378c2cb73c8ba3bc4de39b40623334","sha1":"bbabe677af79ab06aeffe2da618e9604467c7f9d","sha256":"00ef025a6a665e7bee7455a173b97ee8eb506fa5644b72aea50cbc25fb7c2e0c","sha512":"87302a5b75eae05a3e2df8920a5d30cc96656e8634bbf06acf93cdbf97ef4783e9366306360ad32b651e88a028e7a3c5af5c072dd317f159d7e2dd8b5c011c99","ssdeep":"96:UnZkIONdWHkjjjSoZquoooooooooooooooooooooN:UZk/dWH2quoooooooooooooooooooooN","tlshash":"6052fb557e58b081c0fa3b3219d75845a912835f74a09e017d6dbc63dfa03a32d1aa8b","first_seen":"2026-05-22T02:22:07.34029Z","last_seen":"2026-05-22T02:22:07.34029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T02:21:28.108Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /prointro.asp HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T05:51:52.701735Z","times_seen":17881502,"resource_available":true,"data":null}},"time_used":4215,"timings":{"blocked":4066,"dns":0,"connect":151,"send":0,"wait":0,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/gys2.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.845Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/gys2.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:23 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c73ebf103ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 23569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2013:12:26 23:18:23], baseline, precision 8, 380x31, components 3","md5":"95e5d2c109b3d0815e8ee88b6f22f532","sha1":"bb96e9c30653dce459fa7ad92c3a1b9db582cac0","sha256":"1c64495516a943e7017f51a79b1430e908beca3049fc9c19f7e34097cc2b7748","sha512":"20926e5dc8ce50ed6f37e76a65c4ff0d1f2f48015663543468935199fec37f81762765eade3909294cd53697635792cd9a1497b0cbe61f068797d505215c8bea","ssdeep":"384:9QIUKIUC7mfa7jz1aYzUDgHlPFeDfEU84b3rEMUnNB:9nUFUC7mEo2NcjEwrEMUb","tlshash":"0cb29f29b7916f21f4da52718cb2c7c992219eab3c831942749c1f837f647923d3b263","first_seen":"2026-05-22T02:22:07.347784Z","last_seen":"2026-05-22T02:22:07.347784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":262,"dns":0,"connect":148,"send":0,"wait":150,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/blueBg.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.154Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/blueBg.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:17 GMT\r\nAccept-Ranges: bytes\r\nETag: \"85736dd3ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 20x41, components 3","md5":"d4dc23950a04cf538b2519815ca2d8bd","sha1":"7b6a23967166bea7664332eebad1e7b14a4f3cd5","sha256":"22289ac7374b1abfb4cd8d48078c8c92634d42b82208e71079dd01fffa5cd2ae","sha512":"bb2d1408653046c5e24489beed1c86d769a64d877b1fe813b09bf5868f22113bb2a58dcdbb1cd046b5e8f81aab769618338bb6c300251bb97dfaef156741b572","ssdeep":"","tlshash":"da116522ba620511de1b967e0753e961e2ab4513a5080a0e5507bb05eb1b6c11c4d621","first_seen":"2026-05-22T02:22:07.353252Z","last_seen":"2026-05-22T02:22:07.353252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/proBg.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.156Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/proBg.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:27 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ce6125133ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 449\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 225x8, components 3","md5":"e745d1ed1877d85c4923e53fe7515813","sha1":"31032cbb366109a177e9a68721701b780ac41eff","sha256":"ad13e90f9696592cfa995b93adde647aabec0e9c504caa4d32da2efc8426107c","sha512":"c39c2ba86bce79e77c56fcb9fb8a99fa196cbf0dc508c8281335bbdbeb5282b3d62506f607893b96228da4e31c49c0eeb0881977731544ce18abc8c0788e7bf8","ssdeep":"","tlshash":"92f0a7431c4888f0edf3153167259d6373271f05990d574b408254ade8136c61a74605","first_seen":"2026-05-22T02:22:07.357375Z","last_seen":"2026-05-22T02:22:07.357375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/arrow.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/arrow.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:13 GMT\r\nAccept-Ranges: bytes\r\nETag: \"953dafa3ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 6x9, components 3","md5":"0b5309b76cdb029b5ad9c55bb771fd18","sha1":"305d03c62eda121050406e3d0870fd508d8ae8c4","sha256":"f7b41168f8c99685d08f700f6ba081691f0003dcd988ec4905cd1d484e4fa77a","sha512":"53a01c99909886281300b10342554b890d324136b67ab8b4e5af85b3712881e2a599b25944f4c665b1283aaa06be2a42a2903ecdc86e09426f753a56af18a7a2","ssdeep":"","tlshash":"7bf0c06dec425510fe356fba017bc320678b7bc16f876b0e04ae60e8d9114d3618b175","first_seen":"2026-05-22T02:22:07.359273Z","last_seen":"2026-05-22T02:22:07.359273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":259,"dns":1,"connect":150,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/proBottom.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.847Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/proBottom.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:28 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e2c4d0133ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 13562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13562,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 225x11, components 3","md5":"e136a5cf4ad44756398e493055082a63","sha1":"38eee67d7faf402ae431250d212036c187626ac4","sha256":"443a674484ca89698deec03fd975e2e9f09594579bb83a6a294c19b31c9b3b13","sha512":"58d363abbfc29fb44ddbeb7de48f81a1ee490bb15aecf09f9a60dc1df3167760c123a1d20e9af9fbe0e9a59642ba2ac635820e3ca2b5e2227cf67699f112126f","ssdeep":"24:/K1nqSWuZDv/SADM+c8ZlTkISmiaN5MAAnW7NAVYeUGevKR6gggggAx65:QqzcvLbZkIONAAW7SVYeBeoJ5","tlshash":"3552011a6cb27280cac6db3024e4a42ede5319437d808e4e76de8c93df88fd32d56046","first_seen":"2026-05-22T02:22:07.36134Z","last_seen":"2026-05-22T02:22:07.36134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/search.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.151Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/search.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:28 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ccd728143ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 2210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 39x18, components 3","md5":"fbb92a0b02dcb63317f67aae5109a33d","sha1":"fbaced8d2cab10d0e95c7774693f6900d67192a3","sha256":"9aca0f97e22449bf53d11b4c48973808c0cf9cc0d87a274800edaa74ea43ba3c","sha512":"a003249f7a763a2111a42f63d94440818acf85c5c035cc678a7023a333b5f8b13c275e2367d8f291061ba4eaad9092affb5426e23ca13e193236f6ba261f63f2","ssdeep":"","tlshash":"af413a904a120a56d52c43b2b7c166b831276f414eacae6ebce193d6eea07d23935588","first_seen":"2026-05-22T02:22:07.362945Z","last_seen":"2026-05-22T02:22:07.362945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ia.51.la/go1?id=9277739\u0026rt=1779416493327\u0026rl=1280*1024\u0026lang=en-US\u0026ct=unknow\u0026pf=1\u0026ins=1\u0026vd=1\u0026ce=1\u0026cd=24\u0026ds=\u0026ing=1\u0026ekc=\u0026sid=1779416493327\u0026tt=%25E4%25BA%25A7%25E5%2593%2581%25E4%25BB%258B%25E7%25BB%258D%2520-%2520%25E6%2581%2592%25E7%259B%258A%25E9%2580%259A%25E7%25A7%2591%25E6%258A%2580%25EF%25BC%2588%25E6%25B7%25B1%25E5%259C%25B3%25EF%25BC%2589%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8\u0026kw=\u0026cu=http%253A%252F%252Fhengyitong.com.cn%252Fprointro.asp\u0026pu=","fqdn":"ia.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.333Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /go1?id=9277739\u0026rt=1779416493327\u0026rl=1280*1024\u0026lang=en-US\u0026ct=unknow\u0026pf=1\u0026ins=1\u0026vd=1\u0026ce=1\u0026cd=24\u0026ds=\u0026ing=1\u0026ekc=\u0026sid=1779416493327\u0026tt=%25E4%25BA%25A7%25E5%2593%2581%25E4%25BB%258B%25E7%25BB%258D%2520-%2520%25E6%2581%2592%25E7%259B%258A%25E9%2580%259A%25E7%25A7%2591%25E6%258A%2580%25EF%25BC%2588%25E6%25B7%25B1%25E5%259C%25B3%25EF%25BC%2589%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8\u0026kw=\u0026cu=http%253A%252F%252Fhengyitong.com.cn%252Fprointro.asp\u0026pu= HTTP/1.1\r\nHost: ia.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: TencentEdgeOne\r\nAge: 0\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Fri, 22 May 2026 02:21:33 GMT\r\nEO-LOG-UUID: 10643462116409083501\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T05:51:52.701735Z","times_seen":17881502,"resource_available":true,"data":null}},"time_used":1029,"timings":{"blocked":370,"dns":342,"connect":27,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/prointro.asp","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T02:21:32.341Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /prointro.asp HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nServer: Apache/2.4.52 (Ubuntu)\r\nSet-Cookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; path=/; HttpOnly; SameSite=Lax\n_d_id=ed3006e2aa738d5b1c09b0ffe936e3; Path=/; HttpOnly; SameSite=Strict\r\nDate: Fri, 22 May 2026 02:21:27 GMT\r\nContent-Length: 5028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22690,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (450), with CRLF line terminators","md5":"6354d482d8c005c7b528f11e28808fc4","sha1":"3d0963ba99cba8d4182ff08539747d7b4bd5203b","sha256":"c93195cf318deddae6fb6eac8fd242c58faa9e06ff52261a829bde7dc4afa7e4","sha512":"e6b782d446866f41981f417f37d61587c7ced0a1bb430a15464d85d7675296f2d1e2c8cceaf5387aedf9764e6960ce72cf48a55b159a16bf1b2d1ea0dc2af7ea","ssdeep":"192:3IrZAkcfJEWMKtxnxmw7U89bWz5DY8Ye8bFt8VZ7v8xBtk4QklhlG/0d39vksL01:3IrqBMKtxnxmGbiTjUxML","tlshash":"24b220119fc8a70a4536c225d3b04e95dfe28027872a4e54f92f657baf3ac160d2f67c","first_seen":"2026-05-22T02:22:07.365189Z","last_seen":"2026-05-22T02:22:07.365189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":149,"dns":1,"connect":149,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/js/showimg.js","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.843Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/showimg.js HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Thu, 03 Aug 2017 09:43:42 GMT\r\nAccept-Ranges: bytes\r\nETag: \"ed4834fe3ccd31:0\"\r\nVary: Accept-Encoding\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":886,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"ef6318187a6745f19e89f0c0ae2dc404","sha1":"3cb88eb5bda082158bc2991e6563f077f7732299","sha256":"3b57f6f8563333da9ff732e87470fb73d3a9368993099a5e0aa9751206ea07a4","sha512":"31daac5de3dd09587a25c2b2d947fa11e9cae6565324fa86a385527a5c63f58e9d69966ec5ef46287d3e034c29f52ba28f19884d8095911057042cf4381edbf3","ssdeep":"","tlshash":"821129197a80e4b2053352c8ba42404afe280a23252971f77cefc2cdbf75355b694ba7","first_seen":"2026-05-22T02:22:07.367278Z","last_seen":"2026-05-22T02:22:07.367278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":110,"dns":0,"connect":150,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/proTop.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.846Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/proTop.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:28 GMT\r\nAccept-Ranges: bytes\r\nETag: \"88847143ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 4911\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 225x42, components 3","md5":"c44700b7b535d37e1ab3faf3ca5613ad","sha1":"97a58c69a3e292c7de084782a1ea12128f9fbb1d","sha256":"6206069e177423499039e109af8cad5030daa0d861da64025bd7e8741bfbea26","sha512":"07b6b8328fe88305448f517d2acfbdb3b0f7d2e4d9e9b9a78762428d294128191eae224b39e550bbf4881fab7718e064c222d3c2ae88150c7a2b681f846ac286","ssdeep":"96:/MY2jOxRfq+yZRRP9+eUbnT//sgQ15UpqjX0tYCxh8Kfn9:v2jGyDYDT/J4jEKEn9","tlshash":"9ba14d2a004a950baeefdd1cc51ec9e9f5724eadbe2608ad07314246d9c8686dbc1326","first_seen":"2026-05-22T02:22:07.368856Z","last_seen":"2026-05-22T02:22:07.368856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":261,"dns":1,"connect":154,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"js.users.51.la/9277739.js","fqdn":"js.users.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.851Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /9277739.js HTTP/1.1\r\nHost: js.users.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nContent-Type: application/javascript; charset=utf-8\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAge: 0\r\nContent-Encoding: gzip\r\nCache-Control: no-store\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Fri, 22 May 2026 02:21:33 GMT\r\nEO-LOG-UUID: 14498684134480321274\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5205,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5205), with no line terminators","md5":"c934addde54a06521031ce21e1291324","sha1":"f2400ed0d0792e622cafe3d6a932cd1e1548b7a0","sha256":"712a3781eaeaab4327ae1426e1626644155bd00f78d699a37b8ab7da8560788a","sha512":"688274471d5a8ffc84ad14a2122c5d533828e2ec1ccd0d1255ebddada832877aa875ff43f32d2e7436ad233490614eed985fc0e7b39a788b2baab85f73b1f39e","ssdeep":"96:LIyHmPg4EY5Qc1dnqW7aUWp36QXiWgQ95qEIopwm3B5fXOiDgCQgeKrmpj:LnmPZEY+cRpeUS36QXiWL5jfpwQXOiDu","tlshash":"adb1b54e70e2b4a247d621b9512f650ff1786a20589cc590ea63e8f43cb45af4333f6d","first_seen":"2026-05-22T02:22:07.370682Z","last_seen":"2026-05-22T02:22:07.370682Z","times_seen":1,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":273,"dns":265,"connect":19,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/images/more.jpg","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.850Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/more.jpg HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Aug 2017 09:51:24 GMT\r\nAccept-Ranges: bytes\r\nETag: \"a285a8113ecd31:0\"\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 6406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6406,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 141x24, components 3","md5":"463d4a3fd3150e6f079eebe128e06365","sha1":"3bf74f1d99569583b62b6332d462dc42eab76c6a","sha256":"086ac12fdc104b580999f9893c8552fc1f770b2d3becec9ab8620d72b54f0bac","sha512":"d63572490436637fcadd048d890ae0318981d0c3a7db8c5dae8f210143104dc0b9e5c3b132f3455f061a0c0f8832d05f040ed8f8dae82086c470d84963662e9e","ssdeep":"192:w9iHUpdp6A36qDQve6eZQADkJyT6SgCC06:w9iHUbP6oCe6PADkJ4C5","tlshash":"62d17b37ad356879fde3a77ac5127491aa86f752405412af190503c1e33b3e0f3b4b29","first_seen":"2026-05-22T02:22:07.373171Z","last_seen":"2026-05-22T02:22:07.373171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/favicon.ico","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:33.617Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3; __tins__9277739=%7B%22sid%22%3A%201779416493327%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201779418293327%7D; __51cke__=; __51laig__=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:28 GMT\r\nContent-Length: 4749\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4749,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"70fabed9814eb2dec1fdc02f5a245821","sha1":"8ea44092cfcfc5b7c54976600b9c163f197474eb","sha256":"8e3932a2439b441c8f3fdd1ade6dd2fb77efb9d5889c6bf7c2f5b06299f4aeec","sha512":"490df8e512d090830b5200b47ca1ed0e1618e3f310b97a8aa9656d46f4c3ec96dd25a8fb45c41fd2cf4c18b402ab9ecc2f9699d49c7b573276cbc21466480b98","ssdeep":"96:1YFZfIH/TGDdUdx2cUIKpHLUpM24iOn1lwYvTAC8TYcDmNVd6dpdidpdmdvdFdAx:SRIHLGDdUdscUJpr8b4im1l3TADTnKWg","tlshash":"b9a1433082d0303999a744aeb0627aceff40d193e97bdb25f156a612c7c6d3f5123349","first_seen":"2026-05-22T02:22:07.377203Z","last_seen":"2026-05-22T02:22:07.377203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"hengyitong.com.cn/css/common.css","fqdn":"hengyitong.com.cn","domain":"hengyitong.com.cn","tld":"com.cn"},"ip":{"addr":"64.32.8.173","port":80,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://hengyitong.com.cn/prointro.asp","date":"2026-05-22T02:21:32.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: hengyitong.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://hengyitong.com.cn/prointro.asp\r\nCookie: ASPSESSIONIDQSBBDBDA=CPAMEMNDDEPBAMMCCBFJCNGD; _d_id=ed3006e2aa738d5b1c09b0ffe936e3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Thu, 03 Aug 2017 09:43:53 GMT\r\nAccept-Ranges: bytes\r\nETag: \"84c16c43dcd31:0\"\r\nVary: Accept-Encoding\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Fri, 22 May 2026 02:21:27 GMT\r\nContent-Length: 1378\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3791,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2319a34103f6a9e9b123f2b4da012d19","sha1":"fd3023795c4007a7524fe5603fc914fcd4bea0b9","sha256":"b0442041477c74488e946f7de46fa425796e4762377d27c306086f3de7534a42","sha512":"60406c95deaa8b5f506ef1b8b846a361810aac5d78c30dc6c79b08732210594312134d58891212bc64e11d9d1d5f91ad95c652feb6ee205c3c8814d3c5afe722","ssdeep":"","tlshash":"3c71be66d716506b711b092ab313fbc23c2d55c2f116df7abaaa3992e0c8123271778d","first_seen":"2026-05-22T02:22:07.380217Z","last_seen":"2026-05-22T02:22:07.380217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"hengyitong.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}