{"report_id":"b5f8bf9c-6ca9-421d-ad47-c99097f47660","version":0,"status":"done","tags":[],"date":"2026-07-17T12:33:35Z","url":{"schema":"http","addr":"bjlcesc.com","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":0,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bjlcesc.com/","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"title":"百家乐网站-百家乐网站-真人百家乐网站","dom":{"size":8209,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9b8aec82c58f44db0e2da822dacba093","sha1":"eefdfd7d9d562be497b46a3340f84e863714e2bf","sha256":"20d91d56e189bcd65f395b82c8aa84f1cd48af613ccd6debf532c54acec37767","sha512":"9759bda4b09593e9305259d6c50675bdc446cd86d481bb119d0acf8e61e823d2913f9d3c93f2c4132110d061428251044770766c298f6d2cfca57e06c3c26a7c","ssdeep":"192:SrnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sArtg:1jmX7Artg","tlshash":"5f02871661d3115b2922d1a66fb3171b6664d407c30bc9a97fcc15cdef89ac9c8a738c","dom_hash":"domhash27012197961c49af023d3292681d65a6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bjlcesc.com","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":0,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T12:33:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bjlcesc.com","ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":46,"request_count":23,"received_data":1967668,"sent_data":11354,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"156.227.82.66","ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":196819,"sent_data":4983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-14T14:48:37.544814Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":453,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bjlcesc.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T19:53:26.26259Z","times_seen":5344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/js/home.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-17T12:36:29.598475Z","times_seen":1220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/e/dongpo/tz/tj.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","size":808,"data":"","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-17T12:36:29.620596Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a5fa861c6ca49d61e3b66285e406fd","sha1":"952a11a8281da85a456b4cc2f22bd03fd6090041","sha256":"a1dfbbc2e18db703855a3831ed0d2959160cc51804621d7e7e2725563cb181f3","sha512":"1cfac80943ef58b3d35bc746cf06f2c690504b72fa8e115048e668058cc17250ec929cffdbd8b0322aaa1ae0c3389fb442731c5a89f344cfec72aaf7f9b50c6f","ssdeep":"","tlshash":"11119e6edc51a168a6c328b89b9bd688d16e1025d109c803a9d9c5ce2c38fc4042134c","size":896,"data":"","first_seen":"2026-06-27T01:10:58.523671Z","last_seen":"2026-07-17T12:36:29.632577Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/js/link.js","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"26afcbffa6d6032cf43e30dff1230881","sha1":"62d42459fbda8b4f035432d3b04333b0eb538eb7","sha256":"8b6afa3e76a35559297feeaabff4a91336eda86ea45516021789b821b0dcfa67","sha512":"074c7dfc0556768c3ad64b33b896883a98afb8b1d010e79bdcaa81952a5b1201a4b92f39134d8395ac9d3ff2c2da2fd3866c0d4d0a5bfcae342a480289d49e17","ssdeep":"","tlshash":"f631c058e6d038260d2708a7595b2c04b663400fbc4aec43f69d4ac0dfb1b2e4b7ace4","size":1742,"data":"","first_seen":"2026-07-17T12:33:41.067493Z","last_seen":"2026-07-17T12:36:29.630514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/e/dongpo/tz/tz.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55a0a29ffe5995b25043ec5374a1fc07","sha1":"f90152d6f33878a1fb4dc90592ec1366a95a9a57","sha256":"c0f2d27aacf5c3d40d0dee1d2c56d0f7702578ff43d77f1d33d8d056658631c7","sha512":"8b1fc1c423fba549634792946353443d4a98b47e8fc8e62996ec3e2ff73e140e5a04e9e7224738666dea295ade9f2fdb05b55784855e7a2173cb592c2b88a216","ssdeep":"","tlshash":"7d215c7fae631154d11a91692bba676c3a3a001b6701c8307afcbe685f52f429847bd4","size":1158,"data":"","first_seen":"2026-07-02T05:57:33.789198Z","last_seen":"2026-07-17T12:36:29.619681Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-17T12:36:29.62573Z","times_seen":2625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bjlcesc.com/e/dongpo/tz/tz.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.313Z","timestamp":1784291580313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /e/dongpo/tz/tz.js HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Jul 2026 21:42:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a555bb6-486\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1158,"size_decoded":851,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55a0a29ffe5995b25043ec5374a1fc07","sha1":"f90152d6f33878a1fb4dc90592ec1366a95a9a57","sha256":"c0f2d27aacf5c3d40d0dee1d2c56d0f7702578ff43d77f1d33d8d056658631c7","sha512":"8b1fc1c423fba549634792946353443d4a98b47e8fc8e62996ec3e2ff73e140e5a04e9e7224738666dea295ade9f2fdb05b55784855e7a2173cb592c2b88a216","ssdeep":"","tlshash":"7d215c7fae631154d11a91692bba676c3a3a001b6701c8307afcbe685f52f429847bd4","first_seen":"2026-07-02T05:57:33.789198Z","last_seen":"2026-07-17T12:36:29.619681Z","times_seen":25,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/js/bootstrap.bundle.min.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.314Z","timestamp":1784291580314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Jul 2025 05:41:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864c69c-13bb5\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80821,"size_decoded":24420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-17T12:36:29.62573Z","times_seen":2625,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/e/dongpo/tz/tj.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.322Z","timestamp":1784291580322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /e/dongpo/tz/tj.js HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 808\r\nlast-modified: Tue, 23 Jun 2026 12:07:47 GMT\r\netag: \"6a3a7713-328\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1159,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"1bf60b5cf9c764caf9e85228dc7bfc33","sha1":"22b0d1971d7ec1ec3bb55ff4771752db18eab9ef","sha256":"1a32c475f692c3c84f550cc194a92fff3df6368293bbec3b8e67a42bc2d92306","sha512":"681c26eab518649736ea2c6302120b5a61e0b0749375c8933c7c890b6195de0c6e09a4184c9af8c5fd0f5e5eeda63ba803574bee4c44737899ccd18ce14c97c9","ssdeep":"","tlshash":"8601f11f7c25e13463921c2d23bbdadcf5ad2016101dc80654dec4ad6c34ff9042ab4c","first_seen":"2026-03-03T01:17:34.078046Z","last_seen":"2026-07-17T12:36:29.620596Z","times_seen":773,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/logo/bjlcesccom/logo.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.328Z","timestamp":1784291580328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/logo/bjlcesccom/logo.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4706\r\nlast-modified: Tue, 30 Jun 2026 21:43:50 GMT\r\netag: \"6a443896-1262\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4706,"size_decoded":4977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x140, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6a53affee7866d39186674eb41e546d6","sha1":"1a4244fad2751400571ef852debbacc0152a373c","sha256":"84ed6973aa78bc4013ce8ebffeaba0944ca65923524a48d68925e6deee5b9ddb","sha512":"4adca13e67fecbda5b549eec88d93941f881c3d62472942460f1404d691ddacd6f401a31f3527e01c107085b40e03b020f7313d8ea8bc240155750b7183bf8da","ssdeep":"96:zSs+foYE926Ipa+M3TF6PuvtLndR/s14Lek+svgb:zsi926aeTF6mVzd12Qekrgb","tlshash":"2ca19f6e04751eb553bc7669201dcc7657fcd525a131f61315b6ee4abc883cb72c2082","first_seen":"2026-07-17T12:33:41.058375Z","last_seen":"2026-07-17T12:36:29.616065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/departments4-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.335Z","timestamp":1784291580335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/departments4-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101092\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-18ae4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101092,"size_decoded":101366,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 694x463, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"640b374a1e2e422616826486039b3871","sha1":"ab6e14ee2bfac574b177ca9a285fc9f9daa960cf","sha256":"4d55a9925d37743044ef75a4fe47de6b28870f329b83acd9073f5a09fe319bc0","sha512":"ab2003b7b69d8c9606e419d9e0a5835ac1768546debf5b3343279c6ddd6bf860926dfacc59bb613285b45c40dc7ece3e4d01feef0ecabb581c1bcf153435811d","ssdeep":"3072:oXA3v/Lt+I5479/j0xizd4ChJ82QPzxJo9W8oT6j/k:oGzT2/4szd4ChFQPzx8k","tlshash":"f2a3129e58e5caf78745e0b0642e81e323ede2169f3d6b80e11daf558ccd15e2350a73","first_seen":"2026-07-17T12:33:41.059417Z","last_seen":"2026-07-17T12:36:29.623172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/1552215839168.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.208Z","timestamp":1784291583208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/1552215839168.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 09:25:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4cc600-b63e\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46654,"size_decoded":46901,"mime_type":"image/png","magic":"PNG image data, 1125 x 630, 8-bit colormap, non-interlaced","md5":"3dda79b55c5295df032d46aa45a92091","sha1":"b943ea4cfedc16aaaeb004c35655279758a79d7d","sha256":"f4e477a563baefc7c098aa5d645cd9e01b357764c9e8b40da49b348d91065f39","sha512":"c67334c095889d88d11c3741ba2a350976091d6150a1f5a537c67ca689a55dac3ccc6ce46b6a40051cb463fd4cd97e4e2de13beb7252b550994c06d5ba370f15","ssdeep":"768:s2+3QKxRbzHyMivDCxNx6xCdeU//NCOtOGMP3ClUIEFIbbpez4L8ph18pXQmVRI/:strxRbeMJh//NCbalDE+pezt18ZQ6i","tlshash":"552302be9841a0c3ec485233df2b3c1a79efe9b75a3f7586205994181d721ca0154fdd","first_seen":"2024-02-21T00:22:35Z","last_seen":"2026-07-17T12:36:29.584712Z","times_seen":764,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/css/module.css","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.305Z","timestamp":1784291580305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/bootstrap/css/module.css HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Jul 2025 02:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6882e6d2-28112\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164114,"size_decoded":32362,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"67e45932bedd92dd7bc2a7de1653677e","sha1":"b15f3b2e370d9a7c2c40ea991c8f4a839617702d","sha256":"6e25cdc64273a412026df8a7b3510d9ba7dd6cd75653dd3eb884371b4ace73e8","sha512":"d6130c594f82eefca5109421095dc8c0603b44c4c714bdb8956e64278c9c1625263a531a1ad401fa344f180c2f1cbe95af8246c9e33dc6a28316ab243f448591","ssdeep":"1536:qiVj2AhHm0CfrtrPr7AhhTQbdS6U8H2GXVxICl1gGqotJFFp4L/Xzbv9ALVTFCew:sAhhTQg6U8p45s5Q","tlshash":"c6f397309984202cf11bc5eae5d0abef32649801f663077ef66370a6d6c21ef577674a","first_seen":"2025-10-09T23:37:04.753197Z","last_seen":"2026-07-17T12:36:29.597638Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/swiper/css/swiper-bundle.min.css","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.307Z","timestamp":1784291580307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/swiper/css/swiper-bundle.min.css HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 14:36:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686d2cf8-4691\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18065,"size_decoded":5190,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T19:53:26.260572Z","times_seen":5993,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/hero-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.329Z","timestamp":1784291580329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/hero-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94042\r\nlast-modified: Tue, 30 Jun 2026 21:43:50 GMT\r\netag: \"6a443896-16f5a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94042,"size_decoded":94315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 672x516, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b873693a2b2ba2e24bcd84bc95043d5","sha1":"73f50c53af3061a5ac5096dc78b5741adef8db77","sha256":"1d7b7ac3bf64f9ee05d1e0e3c065ef9ba9e9316b1e4fc4f7cb87042ee92ca762","sha512":"ef5283f54bf8154e749e96e7ad7439878c1319ebe9f1a13439fb217dda13baf070576495dd2c712e2e0fd68041cf73227bb9ec4a1f5243bbb51aa27427996b3c","ssdeep":"1536:8jJsWuDT4QKxCd87udXVnq6u9vTa2lsRA3TCWH9silKNrWnGy1FrIv9+gbZdlAEp:8TuYQKxgz/p9VR6CWdsJ0TV2ZYEp","tlshash":"939311de982d962f01ac4e8d8d01a2cd15f76ff25a219b8e310deb4dcbbc51a1c31979","first_seen":"2026-07-17T12:33:41.062063Z","last_seen":"2026-07-17T12:36:29.626606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/departments5-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.336Z","timestamp":1784291580336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/departments5-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95502\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-1750e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95502,"size_decoded":95775,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 677x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fca069c7bc42ead79dd921dd99610e7","sha1":"8526b489e5f33b380f3f72fbef61badc118e6e8c","sha256":"d384de0502e985e6c09e226ecec0bcc2fdd2fddbb589d5aa1347bc51f8059ac4","sha512":"5ea198787c38512a00d3aedd1fddc6571223b062f398da5a001f21b9d024010d4ea195ed8b0e98d6b5410b4abdcd61253c44d41e709d974665ec235c9aec2975","ssdeep":"1536:htcv2Koas5f8cS4SVeQBtr/KVkOSIGKUfTOjGMlcw9dOTHWJJOJ5k/m:AzU5fGGCikOS7KSK/c8k6JOJ5k/m","tlshash":"169312b5a27e06f146cc2d4561e6a4dddcb2ec95251cb0abfe67101f0e7f90e2e13426","first_seen":"2026-07-17T12:33:41.062982Z","last_seen":"2026-07-17T12:36:29.609446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/wnspc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.205Z","timestamp":1784291583205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/wnspc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-1eb7\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7863,"size_decoded":8406,"mime_type":"image/png","magic":"PNG image data, 172 x 60, 8-bit/color RGBA, non-interlaced","md5":"6e6f3e6c749737e6c347ec25d39b3eb1","sha1":"076c805bf394c7996a58202e333827837c8b1378","sha256":"391138ddf53bc321563b3d17fe0f37f5b40efba65fc661dbfa239a2b2184ec65","sha512":"b4621a8e30b49a48b1b13e9582c260b02d42ab2cc2509d59e56cf85028eec3dd165e255dff5c61e689ad8b4eaabe74852185efb2764da5c0ec1133a2ccb02a3d","ssdeep":"192:FQSFq7yL2y34yuuSzYUfBY2kCf9pDnA3+O07Zu86U9S0aN:zFjLX3u1YU5sCzA3hEu86sSLN","tlshash":"26f1ae6b1553fcb469dda7e92063af6082136f48b0077a12fb2b29748135fe5f44aa13","first_seen":"2023-09-28T01:03:26Z","last_seen":"2026-07-17T12:36:29.606045Z","times_seen":866,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/dfpc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.207Z","timestamp":1784291583207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/dfpc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 09:25:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4cc606-880d\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34829,"size_decoded":35334,"mime_type":"image/png","magic":"PNG image data, 299 x 79, 8-bit/color RGBA, non-interlaced","md5":"cd8c9178b347f37c9bef76b8f675e3e0","sha1":"1e14408dd2512718208a674236ebbcb4442d3bef","sha256":"488ecf2fc34918b7a5e0c41b0538b6a6907d7f2f84e5df8e367b4b25f5efe454","sha512":"01b8e067c463405404750d9d892b5f6c1dbfd74d19800e7acf0bfcac4d2ed9d0ab7769788b68e518d4e2c31185829696b620b25d562655848747ac4df98395c6","ssdeep":"768:1KEXfnummCpkmHFV6NACX1aXu45xX6piNtn8MMIpO2jQ115gd8Wy:1Kmfn/mm0XcX/96wNtnDO2jQDOdFy","tlshash":"10f202dbfb6b16e89d851b6c21966c0c02c7869bc7fa94f1943a0c3256dce05a97cf90","first_seen":"2026-04-08T23:53:33.224031Z","last_seen":"2026-07-17T12:36:29.582511Z","times_seen":257,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/js/home.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.320Z","timestamp":1784291580320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/bootstrap/js/home.js HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Jul 2025 17:49:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68754346-16aa\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5802,"size_decoded":2098,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-17T12:36:29.598475Z","times_seen":1220,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/footer-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:01.105Z","timestamp":1784291581105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/footer-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125060\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-1e884\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125060,"size_decoded":125334,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 841x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a73e1df83c844524d472c454cd0ad97","sha1":"c66f682f8b1c5ab87fe0530a5b2ae99139d0086d","sha256":"7e329bf6d6041cf910b84d5312ea28def9b1a64313b2063bd39bb08e4a55da8f","sha512":"8f0f3f0800a26dfea3aa4be3f4525f1edd4479de760bbfc9d81c3b5364f6717f6325f1bac6f68477fb91e424822f46d2b4d0365b7f3958f2085747dc51798e96","ssdeep":"3072:Tg3JT2iTLrVmuq7y/MfUjeuszVH6a6HhSiX4:TgZTXr8DTsjeuGVaa6O","tlshash":"8ec312835fc036467820b4d85f09072663d6997ad4268c12b9d857fec0fae38b60e37e","first_seen":"2026-07-17T12:33:41.065559Z","last_seen":"2026-07-17T12:36:29.601746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":734,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/tycpc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.206Z","timestamp":1784291583206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/tycpc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-4d7b\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19835,"size_decoded":20378,"mime_type":"image/png","magic":"PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced","md5":"9cccfc8ca4e4f50e4155a906a42666cb","sha1":"6687ef39ed3ba532124b8155234e819655ac0827","sha256":"38fa753bd6894fd8b0fdd94ba7e7bd9da32cb1e58017c44ce0147afba97b4841","sha512":"4e5e74b92841a16efc4cad516894bdaa1eca4ccdca290bcb36bbaa68cbe2011a6d12005f5bc2946532bbddc4e73161589ab3a296a734b78ad12aaa540bed9cca","ssdeep":"384:nC4JlgpsDv49JmGFnsvbCU5jAEVzJ0smbzRgZGme584WLMM0tq5PHcMV:Ccw9J9FybCUTzJ0smbZhwPH5","tlshash":"ba92e1cc99b518a51940f1dc2f338a48cfe9112c29e58776b1d377a2d94ae6f307c60b","first_seen":"2025-02-07T02:11:03.006958Z","last_seen":"2026-07-17T12:36:29.61306Z","times_seen":838,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:01.355Z","timestamp":1784291581355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 24 Feb 2026 12:58:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699da065-2022\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8226,"size_decoded":3050,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"37e7d1f52c08e5cba53549061a088fc5","sha1":"28c3261f8d0f8046ea8bfbcc0ad0e27c80b4dd5f","sha256":"16fe2998b51bd69b9259cb4d1045e4053b99d36368c45efc805240deebc66f0b","sha512":"e64d59f26fc94e14d5b925894cfcdeace55b2bdc48a749ef9b1a7043df551479d55529bf533bc94d68d5f5f071d501c5cfef7fa3eb13fdde26bdcfeb5f3cc85e","ssdeep":"192:irnMZjBPCpnDZ0CPBfE/k1mp6rPlyJzmRF4sArt+:ljmX7Art+","tlshash":"d602761661d3115b292291a66fb3171b6664d407c20bc9a97fcc15cdef89ac9c8a738c","first_seen":"2026-03-01T01:18:02.551716Z","last_seen":"2026-07-17T12:36:29.592584Z","times_seen":401,"resource_available":true,"data":null}},"time_used":1768,"timings":{"blocked":-1,"dns":0,"connect":1258,"send":0,"wait":252,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/js/link.js","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.198Z","timestamp":1784291583198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/js/link.js HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 17 Jul 2026 05:02:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a59b748-6ce\"\r\nexpires: Sat, 18 Jul 2026 00:33:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1742,"size_decoded":1171,"mime_type":"application/javascript","magic":"ASCII text","md5":"26afcbffa6d6032cf43e30dff1230881","sha1":"62d42459fbda8b4f035432d3b04333b0eb538eb7","sha256":"8b6afa3e76a35559297feeaabff4a91336eda86ea45516021789b821b0dcfa67","sha512":"074c7dfc0556768c3ad64b33b896883a98afb8b1d010e79bdcaa81952a5b1201a4b92f39134d8395ac9d3ff2c2da2fd3866c0d4d0a5bfcae342a480289d49e17","ssdeep":"","tlshash":"f631c058e6d038260d2708a7595b2c04b663400fbc4aec43f69d4ac0dfb1b2e4b7ace4","first_seen":"2026-07-17T12:33:41.067493Z","last_seen":"2026-07-17T12:36:29.630514Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/departments3-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.334Z","timestamp":1784291580334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/departments3-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92838\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-16aa6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92838,"size_decoded":93111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 595x361, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd5d9de9cf2fa91fb4793b226f96ccc8","sha1":"d528dc18ca6f91d777c32c5288f1f659df3b667e","sha256":"ba6d782ee9f2bbbeb7e71f1bf7d900e27bf7551e6ad76f19d3c4504193910510","sha512":"bf857ff9beba38c1c81fc9ec293057e7c11afde02b049cc635b2ea6eec31a2987579b4b4935332d55b0bc4c96831d5dd12eb4d3df17fef4e8333f57a9c31df01","ssdeep":"1536:/xWZf17BHaZCWDeYHkzCvVphnCOoH/ajokUODpo4ImYsFG4zaYbhNfbgYbR:/CfVZGXeuVpIOhwOC3sFTuYbbUY9","tlshash":"2a93127cca322694842b3aed133e6934f07013530657dcb9669b296cd8435fdfa70987","first_seen":"2026-07-17T12:33:41.068378Z","last_seen":"2026-07-17T12:36:29.617949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/app1-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.337Z","timestamp":1784291580337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/app1-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73710\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-11fee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73710,"size_decoded":73983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 567x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14a3fbd6a4c5bbeaab414407c9b62c4d","sha1":"a3121821d80965f809fdf45297aeec85fdd41a6e","sha256":"fc4ea996fbc3ded2bd83af98cbd5bca116d1c0cc2ab11479cc948af05f589735","sha512":"2833e0f3deba40d077552347173551c875ec17502ecc3f97a3ec607f0583c732353029084169d2dd414928d0d5da31f00f765e1c7a0cd01fc30a38b32f81fa4d","ssdeep":"1536:Njrhvf3J4qQvrX48AC1GH4MjBTh+jhiFF2O+OLRD4:JlnBSISSzWhiFIO+O6","tlshash":"1473022a6b9d8824ccddcdead708c2b925c0f771463263b467d96f144739706e3da8b8","first_seen":"2026-07-17T12:33:41.069558Z","last_seen":"2026-07-17T12:36:29.62839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T12:32:58.874Z","timestamp":1784291578874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:32:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":22577,"size_decoded":6316,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d3e0529d37853ec2e388ae68489106dd","sha1":"37669f6d8557ec33442e45b98b7ed5a674f3e27a","sha256":"9e525b3ee9217298d1f291823a6efcb56a8f875e38ed1c52ddeb4f6d0c962e06","sha512":"6bc3a3ae837e8197999403d38e4d1ad6976696427f16a504c52b624f7ea72be2f6cf2c731e9258fab5d6a2d4e5c1a479608d907ab106cd3defa0e58dc68e898f","ssdeep":"192:sQkA/zd6PuHOOXQJjmFk+AjHn1pB/EydF+UIFJk57ObbV7egVVb2Hnsh9dZodqGy:sQke2dmVFn7bSp9zCSR8UwN9","tlshash":"06a24eb260f0a5b751d780d46e246b4f7ed1e21bda6b56877aec07c81fc2c93899320d","first_seen":"2026-07-17T12:33:41.070546Z","last_seen":"2026-07-17T12:36:29.594522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":75,"connect":254,"send":0,"wait":291,"receive":0,"ssl":517},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/bootstrap/css/bootstrap.min.css","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.303Z","timestamp":1784291580303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Jul 2025 04:17:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864b2c4-38a52\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232018,"size_decoded":32163,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"50c95aae1a6c1e089c11681d1e1906f8","sha1":"a65e4fd8db9bd0440de2d6d73c9e7cd00fce4a8d","sha256":"cd1826581e4f2b80af4f1e05897b316c7698441063cffaefbbdeec382ee4cd72","sha512":"7f0edff9370c8d36fb6e96cb25994ff20d98e17702c85656f2ecbc1ec459b07fd2c1b330d2994a1c51ebf7d0cdde5d3856c60dc2fce27145ffeaababbc8c5bc7","ssdeep":"1536:v9xnXGi9GfJkfvq5wlP7cQZDR9uvV982sYRElV6V6pz600I41r:HnXp9GfrV98II6V6pz600I41r","tlshash":"d03482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-06-19T07:12:41.126365Z","last_seen":"2026-07-17T12:36:29.596682Z","times_seen":2646,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/departments1-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.331Z","timestamp":1784291580331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/departments1-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98582\r\nlast-modified: Tue, 30 Jun 2026 21:43:50 GMT\r\netag: \"6a443896-18116\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98582,"size_decoded":98855,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 679x452, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4782178e44d8908b2d2f16b9387398c5","sha1":"53a60105bca6a26ff734a4a86fa4acba8f504271","sha256":"08baa37052deffcfee1551cc7c6658c2932d105310993049697e80debc4b9832","sha512":"d500ff5bf8295f2f67362adf7f3272da00361c5ba94f87a0fa8d9f610038ed6b509e2f96ac940ec33f2e0198275cb230959cf10886fe1786a4fcde0e4472b507","ssdeep":"1536:MIxhtlIqcJEkNq8AhAgkiRb0osVsSZl5XsPsbXztOftzjRTguVl8hqGOvLpgm:drKJEkfubFsxvs0boftXRZXbLpgm","tlshash":"faa31243032634731fe5873b317d1d75c0999ec1f69a58f5494a8ebaea27d421d2c78c","first_seen":"2026-07-17T12:33:41.072054Z","last_seen":"2026-07-17T12:36:29.607332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":765,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/departments2-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.333Z","timestamp":1784291580333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/departments2-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 109578\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-1ac0a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109578,"size_decoded":109852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 654x435, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c210cee6ef648d18ebfe63ed1f9eb3b","sha1":"86c3f36af32870d7187ddd9f79e699938cdd7315","sha256":"be6de3bbce3068e15d2943000f73b8bc0831dec664e1202475f0d227a35d33a3","sha512":"e323181e79325ddc867804ed36835dd6fa130b5b0c319780ff971b2571537a70f02bc877661e6e8d6dd9e476bdd1f313a9867221bb08d2b371e99907b70b791a","ssdeep":"1536:Pk1xI86qER3ekZ8OAOvdEpih3MZ2TJmM2dL1uWa8hx6G99NBfHJzBNVFGXqLk:Pk1xI86LdAOvdEom4XoL1BDxbhJrUZ","tlshash":"cfb312db82cf88367b4e775655e0ebdbd8d9122039306e174fc57b452082ea90bf1322","first_seen":"2026-07-17T12:33:41.072882Z","last_seen":"2026-07-17T12:36:29.621464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:01.140Z","timestamp":1784291581140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/skin/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Fri, 13 Dec 2024 14:50:06 GMT\r\netag: \"675c499e-26a0c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158220,"size_decoded":158494,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-07-17T20:58:40.994785Z","times_seen":31865,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":698,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/ico/favicon5.ico","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:01.948Z","timestamp":1784291581948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/ico/favicon5.ico HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Wed, 09 Jul 2025 09:42:24 GMT\r\netag: \"686e3980-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":17232,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"083803ad77955424dab8b2cf425eaf85","sha1":"aed4e90738d9811e26cd1c2ce7e1f083521e88dc","sha256":"a3e801a31d72f109f4e362757e923a43537fa4e3236abc99bc9909b5874dc3f3","sha512":"1fc8188ac1578959032826b3f893d8f8eaf7a4665a8ad0d4d3b1dc594a7818e36363f3c8c12ad0b5c37db312e3c36c28a85a6abe2040308f993454d08fb25da9","ssdeep":"192:rQlOOOehwmXmFGhDXlPXiYN6TQqBNU6sTQFdw1TtyAwj91exIre:MZwMmIhzlvig6suNU6yTxVwjCxme","tlshash":"a072fd147acdca19c5a9a6fc0ce2d32d795f0a951ee24e768f723947a5b4e04dc08c7c","first_seen":"2026-05-04T09:42:18.68709Z","last_seen":"2026-07-17T12:36:29.624884Z","times_seen":15,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:01.359Z","timestamp":1784291581359,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/jinshapc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.201Z","timestamp":1784291583201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/jinshapc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-a334\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41780,"size_decoded":42328,"mime_type":"image/png","magic":"PNG image data, 295 x 113, 8-bit/color RGBA, non-interlaced","md5":"1d2140363e0fda69f41537010f37ac74","sha1":"9f3791b6ade0a7966dee0253cb698564490e9440","sha256":"65ff8549228320f54f3d93e45194314c43c7cea541241876a57633bb5ac94f92","sha512":"75dd491fe42a57dee94c06e5e389323f0b32a584f3d0223845ea8f945ac9cff401e65cc381f4e8973dd78c14655abfff000186a770df78acddff35e6bb69fa86","ssdeep":"768:fUD/+JUtuV8Sp+uA5mBhYhXXy7I1VzKT26hq34ZhMNg1de0nGtXIIq5y7RYLIXK9:j2SYd1Xy7wVG66BvMNg60KXrsLB","tlshash":"3113f1a116d7074d278849fcda334deec406ab285d19b93ec5f68f34e3846c4d083a66","first_seen":"2025-01-31T12:39:53.036928Z","last_seen":"2026-07-17T12:36:29.599263Z","times_seen":842,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/365pc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.203Z","timestamp":1784291583203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/365pc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-2255\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8789,"size_decoded":9332,"mime_type":"image/png","magic":"PNG image data, 189 x 44, 8-bit/color RGBA, non-interlaced","md5":"e0c9d379cd4926e815abd7d25c32f5e4","sha1":"e9a1fb55262d96495f14da278c7242cc3fda956b","sha256":"7b50586f667edbeb0c3d573a44d40742354c385a2d7ae1971aa4b0173c11173d","sha512":"519aaeff0baab73e269e86413df78c8563728cb4b1f17e448877c4853a726df366f201b9e869078a4fa460517530a84b5ae9da4290511aeb4d0b93aecb9ac99c","ssdeep":"192:6ZTS99EegUNgEBTJ35PgUUxiKlqSvxV5mG5pqghmCoTHV0:2YzgogEr35Y7cK1YGmAMT+","tlshash":"1e02a0bc5a62079b3d1aa9f8172c54f1fdd070eb411f7c99947d201b0c68a1c83af4a3","first_seen":"2025-01-31T12:39:53.02929Z","last_seen":"2026-07-17T12:36:29.615146Z","times_seen":843,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/swiper/js/swiper-bundle.min.js","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.319Z","timestamp":1784291580319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/swiper/js/swiper-bundle.min.js HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Jul 2025 05:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68661bfe-22512\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140562,"size_decoded":39953,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-17T19:53:26.26259Z","times_seen":5344,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/app2-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.338Z","timestamp":1784291580338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/app2-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72728\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-11c18\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72728,"size_decoded":73001,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 604x402, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f110ebae5991ba0f2ef0161ab46dc39","sha1":"58697994692388bd4af24f62adc866e556647df2","sha256":"9f1b63108d0ce9ef16c7b4eed99af3fd88c5d95a1ca675d0e752a80b09188d76","sha512":"bb3576cc9e54becfca2b2216f54d94b433367cc7bb9683b1f7a6b4b561facc49a92b8150203940f6d4d56f7c9dde5c475c076443991e3105b178bbe6f90df541","ssdeep":"1536:5clA4VJLPm5Z5v/II61Lo0HgqpbU0TNykS2HYWL3221ptpY:2Ka6dARa0ASN2AY4221pk","tlshash":"ef6302d81a4c9209c2c175fb1c90b2e692b4f3c4ee1d5807a717fd94a7a29e8cc3576b","first_seen":"2026-07-17T12:33:41.077139Z","last_seen":"2026-07-17T12:36:29.58666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/cover/bjlcesccom/app3-5.webp","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.338Z","timestamp":1784291580338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/cover/bjlcesccom/app3-5.webp HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 149266\r\nlast-modified: Tue, 30 Jun 2026 21:43:51 GMT\r\netag: \"6a443897-24712\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149266,"size_decoded":149540,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 775x516, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9886da85adab39e8dcd959df505d5b22","sha1":"6aae36756f1330443c6c41be8159380e07ded4e4","sha256":"f8a94308f51905b2db47cf85180b2e4ab7ad16f71b06c732b769597d6ff2e9b5","sha512":"5cf7320465890502b62f17cfb6082ede1369f6b0365839d52c417d22501af110d9ff30edb31ba930550bfccdec418f4d4d272ad21d1c8423d57b4b29bbd98a95","ssdeep":"3072:EOBjyrL5axhRCAMMfMiEaZNiy2nRz5zYHv/cImRgyiIOG7aNSlvKylbFX7KzQu:rMpqhRDfMEirz2GgDG7aNgRZX7Kzh","tlshash":"24e31280881cc2a51f6a31c7e7d789c98a9029467aef163f6ff794518b137c5871fa0e","first_seen":"2026-07-17T12:33:41.078015Z","last_seen":"2026-07-17T12:36:29.589682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":771,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"156.227.82.66:61194/static/picture/xpjpc.png","fqdn":"156.227.82.66","domain":"156.227.82.66","tld":""},"ip":{"addr":"156.227.82.66","port":61194,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://156.227.82.66:61194/","date":"2026-07-17T12:33:03.205Z","timestamp":1784291583205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 04:05:55 GMT","end":"Thu, 23 Jul 2026 20:05:54 GMT"},"fingerprint":{"sha1":"35:50:7E:0D:EE:A4:46:F3:F6:7F:03:35:9B:97:3B:34:1D:2C:8F:12","sha256":"01:4C:C2:67:67:15:D2:28:8B:94:FB:B1:F0:13:57:FE:E4:14:24:71:D2:3F:D7:A7:7F:CC:6E:08:DC:D5:A9:3A"}}},"request":{"raw":"GET /static/picture/xpjpc.png HTTP/1.1\r\nHost: 156.227.82.66:61194\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://156.227.82.66:61194/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 24 Feb 2026 09:51:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d74b1-5800\"\r\nexpires: Sun, 16 Aug 2026 12:33:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22528,"size_decoded":22814,"mime_type":"image/png","magic":"PNG image data, 183 x 55, 8-bit/color RGBA, non-interlaced","md5":"c53d923594566be7e0e41e8d720c0ac0","sha1":"e16a4b701d10291bbff90178e8b0d5f576e00821","sha256":"021994557d1d9642fdc16a0d8f6e471bec81bea7f366de6ef631f536c165418b","sha512":"554f7d6d44d26905610a65e21bd157ec30fef501c356e97787deca22f9089216f59e284f0effab7b18da89134af594d4ffd5eed889b1b5a4d5a5412456b9832e","ssdeep":"384:QfchEzlZmrXTjUDkJe2tERBxq2ceTdr1lFJ3d2Oo+UQSYJshjRHXvcQ:QfchEzrmrXTjUhP42cKpFJ3lo+UHYa//","tlshash":"fba2e0f1f36ff1b54a924d554cf8e2b080978942e088ee6135cb204acade8d31d993e7","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-07-17T12:36:29.604807Z","times_seen":982,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjlcesc.com/skin/fontawesome/css/all.min.css","fqdn":"bjlcesc.com","domain":"bjlcesc.com","tld":"com"},"ip":{"addr":"156.239.70.33","port":443,"asn":54467,"as":"XNNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bjlcesc.com/","date":"2026-07-17T12:33:00.309Z","timestamp":1784291580309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bjlghh.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 03:40:56 GMT","end":"Tue, 29 Sep 2026 03:40:55 GMT"},"fingerprint":{"sha1":"19:3E:83:15:4F:97:E8:28:A5:A0:29:94:4D:C3:E9:7D:C9:5E:A1:7A","sha256":"75:35:AF:9C:3B:BA:6E:3D:8A:C1:69:B3:A8:2E:AE:22:D6:28:15:23:68:87:BA:54:4A:7C:C0:84:CB:26:06:AF"}}},"request":{"raw":"GET /skin/fontawesome/css/all.min.css HTTP/1.1\r\nHost: bjlcesc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bjlcesc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 12:33:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Jul 2025 04:17:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6864b2c2-1907e\"\r\nexpires: Sat, 18 Jul 2026 00:33:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":23140,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-17T21:24:52.666051Z","times_seen":13025,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bjlcesc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bjlcesc.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}