{"report_id":"b6786a77-7bd3-42ac-8505-22bbbc5cefa8","version":0,"status":"done","tags":[],"date":"2026-09-11T03:49:23Z","url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":0,"asn":62904,"as":"Eonix Corporation","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"title":"中国·36365线路检测中心(股份有限公司)-Official Website","dom":{"size":4312,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4277), with no line terminators","md5":"220fcf64e663936361f198d234d4f346","sha1":"6f3ed710e59421f43b108a12c062ce9ef66121b6","sha256":"e7aee644a0c90b44247f91d23bcaec90828d56a45d05e49ad467903dc6d49e26","sha512":"b8e5f5ec64d172303337cccfdd429c2f3af13ca94c3a26cb746aab56b36701c08e2f15f92b8f067f6c230e4b85d8c4828750a900a310a75c2fce6d6e55dcea89","ssdeep":"96:uatJjIymyM/AmMAoK5Hatov87xSXwX9xSXwXn:uyjI97YToHr87xSXwX9xSXwXn","tlshash":"1591616b89c8d54e89a1e088d37af6cd9557102ede27dc07fee5d1cee904ae948131cc","dom_hash":"domhasha500b6c0442b350286a587097b07272f","first_seen":"2026-09-10T21:18:12.287302Z","last_seen":"2026-09-11T03:49:34.354088Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":0,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:49:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"89tongji.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-08-03","domain_rank":3345724,"first_seen":"2023-08-03T16:00:12Z","last_seen":"2026-09-06T09:35:14.523526Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dajiafa888.com","ip":{"addr":"143.92.57.36","port":22118,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2024-10-08","domain_rank":7213971,"first_seen":"2021-01-31T18:30:24Z","last_seen":"2026-09-09T01:58:21.36232Z","alert_count":0,"request_count":1,"received_data":3124,"sent_data":823,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-09-08T19:08:40.724899Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fcl.xueyuxingfeng.com","ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2021-06-17","domain_rank":0,"first_seen":"2021-06-17T13:30:21Z","last_seen":"2026-09-05T22:00:48.041281Z","alert_count":1,"request_count":1,"received_data":3641,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lqcx.dgyuehuiwan.com","ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":295,"request_count":59,"received_data":539033,"sent_data":24862,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.lngc.edu.cn","ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T19:30:51.899021Z","last_seen":"2026-09-10T21:17:27.341101Z","alert_count":0,"request_count":35,"received_data":4140686,"sent_data":19594,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tp.xinxiyidiantong.com","ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2019-08-03","domain_rank":0,"first_seen":"2022-06-30T09:41:39Z","last_seen":"2026-09-07T02:38:54.558416Z","alert_count":0,"request_count":9,"received_data":1771761,"sent_data":5313,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"e4f204e4078cc84660a67e9c76f033c5","sha1":"72ce53dcdf08daa1e8f2c3ea022e4e8dc6e0a3e4","sha256":"9512bfc09b6cf3f5c3e838cf39140ba0a1657cbb61a3abc2443f22526bb172ca","sha512":"a6df100453bc7aa5dc9ff1401b8570d204a5ec42959c76e37eb8e6c1c80048390e9a26612fb9efd9c2854901ba1dd03e17cd3773ad3d39e7da90c09a01b9fb2e","ssdeep":"","tlshash":"2b010000c3300000000000300c0c00000300c3c0c0000300330c00f0000f003c0000cc","size":720,"data":"","first_seen":"2026-09-10T21:18:12.346859Z","last_seen":"2026-09-11T03:49:34.452005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/bootstrap.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afa0caf5a8e6213fb0d29ef8819fec9","sha1":"87a1e8a28217e78acf39d40a8cc01b9cb1e0a151","sha256":"76bfa45115a6ee193ef19e2a29f2bca13bf8fbb987016f453b2e50593a6cdf74","sha512":"85093ebe83ca9d219aa504602a6f66b3d9a8cc35264c3e05c62a2974ec6b07021b63b85460b0e9c13e4bd5958c92c346b4b49c886544733647c69843092a81d4","ssdeep":"768:Rl1ZD27UwlNZMl9/qahCu+jS1g8ep0sUCvFXfl0KGf3ZlRQ:HO70GS1K9vlS3Z7Q","tlshash":"eaf28606b23031a147dfb1e1515b020a72396a7ee906907c38b9dae53db5c48717bf3d","size":35783,"data":"","first_seen":"2025-12-26T20:41:59.790612Z","last_seen":"2026-09-11T03:49:34.42426Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/_sitegray/_sitegray.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2309fffd73e167e4b371cf3c3aebe18","sha1":"d2562e6a6bc55e79aac20d97af147c0009f90c9c","sha256":"075308518911ad2710276df02c0d9f6057f7a6d16b2dd7df9901c1fcd791907f","sha512":"46662e929cd41af11aff50785620251001823eb6decfafa30725dbc7eba9f6dd8235a2c32205ba88a876bd7a283c20ae3bc9e346a58c90007900ce68f6e21179","ssdeep":"","tlshash":"8580000808ab3abb0008802c3c2c0af3888fc2e308823c0ce02a000c0e2c300c088c3b","size":32,"data":"","first_seen":"2023-09-17T09:21:02Z","last_seen":"2026-09-11T03:49:34.449646Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c48bcbbe22f71b2a0095b1c767bbadf","sha1":"82094973618429cd453bd774c802749c2b41628b","sha256":"f9a91e7280399f0ead5f404149e6a208a1eb87ec6adb668d592e7d31cbd0ad12","sha512":"1f233b3ddc14fafb684712bbf0262031b0a86fbf08333a85900b99f6800e895678d6e132fa1c71d6e0927242e717e9dae834f7cb686f1ea7446d67433d4261d0","ssdeep":"","tlshash":"f2012b9b3a8788f01efb73360625839d3ba09603190ae4993f2c4d50cf21e71856fbd1","size":802,"data":"","first_seen":"2026-09-10T21:18:12.348382Z","last_seen":"2026-09-11T03:49:34.458924Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e36f0968c00caa06a0ffe9d0eeb8dbe","sha1":"835b0935f89a92f2aa61e412a365763d90d83356","sha256":"2f82a707e25739b95a1a3a2975a660f37f6a49f790496a92197e3912c3c612ef","sha512":"023650a1a3fb149f77e0931b91b4479e17aa7fce630a6ba9eadd43e0a882dad82a22dca16e32b73b42c88f767dcc5310d53e27aa88be921deaed37f0ed91a38f","ssdeep":"","tlshash":"e1a0240474c07c471000c0340d441c1414070c5d7df001544335440047cc3531d40335","size":69,"data":"","first_seen":"2026-09-10T21:18:12.349835Z","last_seen":"2026-09-11T03:49:34.461301Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c6623677955b03eaee8f5648b8415d5","sha1":"875373341a4e23c6667811c4aa2809ae71a2c7bd","sha256":"42a5677770f5d96f59cf8fb570b93de07dcc265d7c5739c48eaaef122dc7ecaf","sha512":"111173bfe510d918e3a82e3a7b0daf235871840be5c3105c6a70151deb9aea8b30b8abfbf8d64f67e9d99028262da0d64900792f80a1205a3b21b09b3439cdbb","ssdeep":"","tlshash":"6dc04c047fe06855a01964b68cc809752ae7ad1f66b0275c9a6b1001654ce6755f0721","size":144,"data":"","first_seen":"2026-09-10T21:18:12.351442Z","last_seen":"2026-09-11T03:49:34.463404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac09cb80386a759343c4752c2ff74766","sha1":"849bbdba76d295b87fc51cf4ab580555081cc995","sha256":"e0908ecc9f9394d2754e8775e8aaaa22aa0605c4d4d771040e1c54bfdc8ee84a","sha512":"420c86637cc4abe88849ea36bd9d5619fd3aa4d157e83bd2d3346bab7fc2e379842276a05b21ce9f82ff893a7a2e973b59ee72da56807f4cfd67e4443211cddf","ssdeep":"","tlshash":"70c002097ee06c64500962b70aa80869275ba85f76b9b658c29f411966ce56f25c0732","size":169,"data":"","first_seen":"2026-09-10T21:18:12.352967Z","last_seen":"2026-09-11T03:49:34.465275Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"661d94ca86cce7aea2173ebc1c05d3fe","sha1":"eb5aefefc781e82db0b13d6a659fb158fb0e43df","sha256":"084d0e859f8a3ccfaab376ef483d2889995670ec845722a55957355805f1a793","sha512":"7bf1bdae6aff8179491313038508bea4c8be895317d89ba80fc27c70286c3dc51713023cd5e8636b686013e82853293f16a2f37b693d125bfeb4c8386d0cb953","ssdeep":"","tlshash":"ddc0ca053ff02c20e008e1f2108808a8163be95f36b07e8cd25a0000300c9b302d0738","size":194,"data":"","first_seen":"2026-09-10T21:18:12.35482Z","last_seen":"2026-09-11T03:49:34.467141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"07bf6aa97c5a4a23410826123ceddd24","sha1":"0db8840b2722e7f02e9f886d4f4cbd6aa105d377","sha256":"a82bf55fb3a6e5a95a02c1db4f4796664e9c2d072fb5d04627106e1cf91800cc","sha512":"388c26ebc92f8b101972cd7436741404e19ffa8dbe59908f924ae0d191c864a7c64d1f892fe03b09e4d72b607e0b93efe5a0900af8bcf05e7639713788e63282","ssdeep":"","tlshash":"17c0ca867ff82049a208f2b30d4c0c74021229af3ab02e6cc2cbd561ac0ca3312d072a","size":194,"data":"","first_seen":"2026-09-10T21:18:12.356483Z","last_seen":"2026-09-11T03:49:34.469015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12efc871d956b1162cfc2c5a0610f37b","sha1":"eadc076912c24a8f0ad3e7d070871ddc0d09601d","sha256":"ce5477a3ae5b38dd8e2aff8b41337dc013f6b2f84f272254d1ea3016b860737f","sha512":"6178fbcd4f50cab76b1bdcd0d075391e3d1285a73a5ad53873d151b4bcc71caa5ec82173d1e0017e59627dca788577ef69cc74f7f84e3c8d3a0c2750dffd465b","ssdeep":"","tlshash":"42c04c247ee114cf2048a0f5044a0a760ae3389fbaf0275cc61a62947d4f34705c0312","size":148,"data":"","first_seen":"2026-09-10T21:18:12.358563Z","last_seen":"2026-09-11T03:49:34.470699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9002b67ab03011edae3b3d72652e1a7","sha1":"3e0794ed840799c66a881412bbb21a8ce0058779","sha256":"a8d4b0df404f0d1680593eb5279c93b0623cfbf1c6a494d149f445eb7eb4c546","sha512":"cb57e977f4fabb58fe32b25c77c0910cc01c9cdf0f98475bc2218ca39e88a60e876fa4ea07d1c254d84f0619f50dd61b298e62ed68e901b50f15baf07db1e671","ssdeep":"","tlshash":"0ce026aa29721674578419fa992ff92cf1aa617c0554e003f58dfc220024eef4e2ead5","size":343,"data":"","first_seen":"2026-06-06T21:46:17.717816Z","last_seen":"2026-09-11T09:17:45.699411Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d53a65f80d4cf2a74a9b42ac18a1fbe","sha1":"8dc4a566ed04886a25f2f80c779226bfe9dabb68","sha256":"d972f6bc830a0c56a6a78e5ef7427db105b6a14ca0e8e08233cebd3f121b9084","sha512":"b909bc1879827ff704d9cf13ef072a58b0153ae7a427e5c0c443afd3af847fbdea18af1d096027dc296d56e0c1931cb4a5a25f553815ad33e1154ef602c21d79","ssdeep":"","tlshash":"aaf0bb0b887590734927513d5deda2014b9bd1131f2c3a61768c02845f6c39e73f76f8","size":596,"data":"","first_seen":"2026-09-10T21:18:12.363275Z","last_seen":"2026-09-11T03:49:34.47319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c7f495b97119c47b2c3a791adc29c73","sha1":"ffe8d6f20a751f66a07f4634c4e68da02128d61c","sha256":"0aa4f446cb8d486f37f2aa5347630dfe3ee58b3b13b6a0beab5c07a1caae2ab9","sha512":"3140d600959116ca99c14be095bb591856feb9f19a3b0daa4fb1d54643077d7b0f778d225c43215c013d864b5f000a09d0929a2c99cf12545e651b84e3053d1f","ssdeep":"","tlshash":"6d21540ea69704305ab3a6360ebf09482a7d8137200bde203b3c499ccfb17295e677dc","size":1320,"data":"","first_seen":"2026-09-10T21:18:12.365184Z","last_seen":"2026-09-11T03:49:34.474732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/jquery.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9118a78f3235edaabf366ba70b89a9f6","sha1":"924f5326c2f165cca6f94aafdd2dd625ed3467b0","sha256":"cd75c40c731eb9e4ba6bc7792c4366903ac6d1490b918a63fc55d4b8e7051ac3","sha512":"1a177a1043ff3ab2b6af9cbca710b11ded8e0cdf95415f65fa9b6d898e25a9d4e7fcab90950466883b763a4e45d996daec1549958b70f5e5f924a2ad5fb86a00","ssdeep":"1536:ERUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4agocVi8SMBQ47GK7:8HNwcv9VBQpLF88SMBQ47GK7","tlshash":"2883f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87444,"data":"","first_seen":"2025-10-10T11:19:39.170483Z","last_seen":"2026-09-11T03:49:34.389415Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/formfunc.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6eecbb5a8b8d7433b057ca0278621d","sha1":"4ea275b6760de618db4590e04379b6c2ed6578a0","sha256":"59866fb5b72e7b5e648e9e08d5b6071f0bc5a95273d500b1917161f4c52448a0","sha512":"83329157e933e69427f79809e3632ee3a181b9f9c2cccad4ec877c2138e53254d8042ffee18914c71cf6aff66949679f683ac8aeb5790bc95e54602010491cfc","ssdeep":"","tlshash":"8921990ea1a230a0a793a67d47af8344b0b66417014ad920fe2cd5e48f15a445a9fff9","size":1140,"data":"","first_seen":"2023-06-02T14:27:10Z","last_seen":"2026-09-11T03:49:34.406799Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10eb75278caa69e2a9b0d8500aaa2c2c","sha1":"772442662b964a3c1c7983c2f5411029ee19a40d","sha256":"4fe79ee80602e42f9f5a2df5ba9c56650d7283fbdd2c18e26385541bedfeeabe","sha512":"81ee3b2c0bcdf29906f634ae3006304a9e98773edbe0679fef69598bf586da0c031ba2fb9854c6fab1819669bd18b1bc8400618a660452f088917ceab452875c","ssdeep":"","tlshash":"58f0d46f5c41a6681ad2359cd7abd68cc06e1064500ec403aad5c8cd3d3cfd5142378c","size":493,"data":"","first_seen":"2026-08-16T05:15:17.195745Z","last_seen":"2026-09-11T08:46:58.723805Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/wow.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"144241475e229591ee027ffc60b0e278","sha1":"dc559b21eb788d8c8aed1e0329de1f5db1ec41ee","sha256":"02228e00e20f3d087d48d4150521711ea7abeab713afdd7f7e1d19b3776c1416","sha512":"00cc664fcfda0a63501bb80e39ea3dbf70643c028b5031422294c6ae4c9a066f72f6bb1eefa20543b2dc9bb265eb6c4e6dc135ddef08c9d2f4d02b97b37f120a","ssdeep":"96:wPV6GqKyR6TYATHF/suCg5OVEE1nce1gJ1IHImBaokbl:wPVfSWFsuCsOVEENceiJmHILoe","tlshash":"91e177c9bb877031c75791f1873f0546b33a59ada028047cb6a984e53d74c69523bf78","size":6971,"data":"","first_seen":"2023-05-20T11:27:53Z","last_seen":"2026-09-11T13:37:51.882069Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fcl.xueyuxingfeng.com:6987/master/faith/sj.js","fqdn":"fcl.xueyuxingfeng.com","domain":"xueyuxingfeng.com","tld":"com"},"ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"12de2458417cf5ada96ad1a853cfba81","sha1":"b8782615c9815c72070a4e785b95acd056cf397c","sha256":"2694bee860690e5659d75440ecb916c6cb8ee8310b4c0bda653b10ea2a0a0f85","sha512":"08b2e31e58dac46f0300639446090be0608bc290192bb66e6bf32f9c1c0d5b9782df890b8c9a9b4f10a4c87b80d0b2c44e785444eb8d0d86c5f20cf8b9b54fbb","ssdeep":"","tlshash":"be611f54ef8d20338e133155ae6f958c24be68577958eca7f84c64d44fa0d38852beac","size":3363,"data":"","first_seen":"2024-10-11T08:18:50.521405Z","last_seen":"2026-09-11T08:46:58.719393Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/common.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0902f073d88cf56f02abf78744d60ad2","sha1":"7ce8cce4151ccf94d0b8b07e5ed4c04c101b3aaf","sha256":"f3e3705449947e116f0116257d622dfa0a82795945ae400229f6ec7594ea97ac","sha512":"e29962f02286ecb6c8e8a0598c5b56dd36f8d4a3da9f40539de5d02b0d7a55264386ce584f36decf4051a44630640e5c51129c86f1ce410e25c6e4569a8bcbe7","ssdeep":"","tlshash":"76517648f072d27510f738764e2ff5107e8bd01be288c900f6ac08f5af58995d976b8a","size":3075,"data":"","first_seen":"2026-06-13T13:24:29.875194Z","last_seen":"2026-09-11T03:49:34.428786Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/dynclicks.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5157382605664ad2c8eec733c257aab8","sha1":"7f13185959f873bf946289a1449176103919fed2","sha256":"1b5f20c219d37427be2c6b019f2cc625ef8d8bf5fe13b46c246532428ff5efee","sha512":"fb4e8b4c6cee1bcddf7c00f8b559b6be08213c439ea7ecbb9d7a6c365dfc4d765cf32d978dcaba11865e7c592fa53f2836678e9c44842318fdee428be1ad69ea","ssdeep":"","tlshash":"436101f4b7b96020111328b80b5fd340f0b594176b94cc58ba2cba55af5c625adf8eee","size":3366,"data":"","first_seen":"2023-03-07T12:04:23Z","last_seen":"2026-09-11T03:49:34.388632Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/counter.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0e15593f4ac92837c52def11e96977a","sha1":"dc5ceabc33bb1f6b5aca7b434c4451767e361f68","sha256":"88e3e43d21ee10abc7e1e1325ae15a0cfc63755d17ad9e0102aa1393ab16fb6d","sha512":"ebd3fa35a94c9eeac466ab5a6d39f0f0ca2a0b9f0e2ba0a4ff4fd96a35ff295586f4bb1d9c846a7ce0516871394aec267e1b54d88370dc22558294829a28ed6a","ssdeep":"","tlshash":"732145e01d7719e75e1db6606a0b326d7c75d571261dc0307c0ce1300bb2796b1b6eb9","size":1315,"data":"","first_seen":"2023-03-07T12:04:23Z","last_seen":"2026-09-11T03:49:34.371856Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1e544e5597741a3e1520ddf86bfa1cc","sha1":"913cd806f44cd9df000f42bcb222c0488ca611f5","sha256":"737ace8849b67a153de7b65395a32dfa54c8181aa5dc225b5339a24c020747c4","sha512":"15d9e93c1f0bfbcb9e40472585c0f5a3a70c4812fd04a6bf0aace3729246458a6c587fb1cdc8579241aa1b330034b8d05e18d955de350429d0deeeafddf11f35","ssdeep":"","tlshash":"96f0d47e5c41a25c56d2359d57afd64cd19e0035100ec443a5d5c4cd7d39fc5142534c","size":493,"data":"","first_seen":"2026-08-27T03:25:27.519097Z","last_seen":"2026-09-11T08:46:58.724501Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/jquery.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84dbd62ab21f9a080a3c75007194d6f4","sha1":"c5e7a0dcb98e094964d941fd44af99c097255501","sha256":"2ba1b5b707262ff63d5557ef29c82e3c5fb59728b65d95b56ad14382f367877b","sha512":"e86349b8322b0e3317d56bdfe0ef17de495872e979b11bf4bf9857983299905753be82bfea15028e6dfcb00ce5273725e074061d3fc0714c11310a5755b0536e","ssdeep":"","tlshash":"ed01fbd887c4d85f6ecc5d53ea14deca62b2812b97d971838328fe8c05a9152c85c489","size":738,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-09-11T08:46:58.716869Z","times_seen":372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/jquery.la.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"461822110d01cf662bd3390d67a34843","sha1":"00bf5f907fd79f045ceb061a567d1068015ca5c4","sha256":"9df6bbbb8058668687d29f8a563e6154f5ec70744135be7bfd35cf3295298e61","sha512":"66569b961b5bdced9cfa15b4199348f20f32decbf65c183575d0ece80dc1b33eb9f9c4e3db4288bedafbe474afbdfbbc03872e849fbe5220f5355d4bdf1b267b","ssdeep":"","tlshash":"2a21f15f7c06e3186a91296637b7edacd9ed1031500ac80659eac0ac6c29ff90113b4c","size":1213,"data":"","first_seen":"2023-10-31T02:49:05Z","last_seen":"2026-09-11T08:46:58.721424Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/news/mp4video.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd68cb487d57362e09db4e9bd250fce8","sha1":"42c4a3c6903ba0e6995b74f52c70feb09e99c992","sha256":"12ab7535c30920b09e25febf02af50917a77dccef85520def4d6ac1a2c3ba398","sha512":"9e2e2a8607574950381109348d46dacf22abcf19d57cbf439e940462278886a85e5124da24abcaa871466e53317a3856bab965a6522d8a1fa345d367f9d4ea98","ssdeep":"192:rD6hVMTDWFX6XufqRbLvSnqXzOnJaJQiT35xnAde:rD6FFX6e4LvayzOnJC530g","tlshash":"4ce1b539cb92206b181723646fdac00431f5d4036359cac8bd1e7866af68a9957b9ff8","size":7143,"data":"","first_seen":"2023-03-08T01:04:44Z","last_seen":"2026-09-11T03:49:34.392298Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/base64.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f2562d752d6046317d7ece470f5abb","sha1":"b47c4b07e8b35df1eeb47c67382a2db1ebe3090a","sha256":"c81ca27c4c7764046a98a891cfb2d12c410df892fa0ab963689fe60473806c99","sha512":"ec06226350fef0a16e1b7961d19e2269779860319148cba2caf02d87f557c5e54f8fbb56010546600d710a63cc90fa28b13c1984d08411cfda7c42d337a3ac06","ssdeep":"96:IalB9hzRtYoctsRCbLcztLjS0zNq29eWQ/z:xLv1ctuCbIztHS0zNxeWQ/z","tlshash":"d091ee062aaa74b40adbb3350fdf208865596427020ddc94bd1d9aa04f42bb05ffdff9","size":4611,"data":"","first_seen":"2023-03-08T07:27:53Z","last_seen":"2026-09-11T03:49:34.451277Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/slick.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95383e43db2d2e76e5b5b347065524fd","sha1":"bf244c035bae9c954ac253c1ffe68152c3e42dd4","sha256":"35d7aacb9c584987560bb33faa8b698bfce9d5886ac30103e7ac30401f353e68","sha512":"11fed6f2b2cb03f308e87bc5df4efad74a5bb7fef1cd035b97b428f70629797bf559461c3f0f8fd6f9e7f7fa3c5d733f77eee5407f87d9aa7de4cb3f0e9ee6d4","ssdeep":"1536:xrnrWutGI2R7H+e4yMibroAOGJATcY4sWlg9:xrnrlGI2R7H+e4yMibroAXJATb9","tlshash":"fb83ee0b55f6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","size":83762,"data":"","first_seen":"2026-06-13T13:24:29.85071Z","last_seen":"2026-09-11T03:49:34.450576Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/centerCutImg.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79ee6fbf1a81b304315607b6f856be7f","sha1":"3049efa200b46e528f3b40f46569b71db60f1760","sha256":"c40dc99f1bdd732a7a6df44b6a589903a9c5cc827971bd2bd6876794905bb0ce","sha512":"cd1ccd580dc3290b7f560ce4410101d83fc1684d108c22dd7b597abadc0b132106dec305a2ffa7a4a372458aaacba6bb9693ee42a8f96bb76cbc4eb4465d033b","ssdeep":"192:Tk9Ds96CxEo3tP6e34W1PeytSkv8qe8Cg:T+AQ0SChh","tlshash":"cbd1892eb6f72974c9423b6b0e6b43be386bc40343478c287f5c65d95f8050a2ea47b5","size":6768,"data":"","first_seen":"2023-03-13T03:41:10Z","last_seen":"2026-09-11T03:49:34.367389Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix04.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.006Z","timestamp":1789098534006,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix04.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix04.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":622,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix05.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.007Z","timestamp":1789098534007,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix05.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix05.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":645,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix08.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.011Z","timestamp":1789098534011,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix08.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix08.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":748,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/code/datainput.jsp?owner=2121262118\u0026e=1\u0026w=1280\u0026h=1024\u0026treeid=1001\u0026refer=\u0026pagename=L2luZGV4LmpzcA%3D%3D\u0026newsid=-1","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.398Z","timestamp":1789098536398,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/code/datainput.jsp?owner=2121262118\u0026e=1\u0026w=1280\u0026h=1024\u0026treeid=1001\u0026refer=\u0026pagename=L2luZGV4LmpzcA%3D%3D\u0026newsid=-1 HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:57 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":255,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":1011,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1011,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/F/4C/CD/8B99295EEEAD04027AE623F7077_50B55C81_14FCC.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.443Z","timestamp":1789098536443,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/F/4C/CD/8B99295EEEAD04027AE623F7077_50B55C81_14FCC.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/F/4C/CD/8B99295EEEAD04027AE623F7077_50B55C81_14FCC.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/back.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.552Z","timestamp":1789098536552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/back.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 990339\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"f1c83-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":990339,"size_decoded":991356,"mime_type":"image/png","magic":"PNG image data, 1920 x 2792, 8-bit/color RGBA, non-interlaced","md5":"cfac5eed309a89597bded6e3214c9c52","sha1":"b5113adfcb75c6b5d39d98bc5aba07801ec4423c","sha256":"bf791e05495dfe420b02d855c7f59d6d447e864470175a488d81852dbc35d7fc","sha512":"5573b85d936237b384c38691dcb7b3d2a5764b2b6703081b4a0c6babdc7530168a384dc469ee75bedb3db5c28c3bd8a7e2976602e26e67a275b3be6898cb1e77","ssdeep":"24576:wYOLf98MCEoQjhMlCXLl283tYIRpzPfsgeXpP:wnLf9QEoQjhMIZ283npD/KR","tlshash":"3b25224472710e6bf99d3830a90a6b94fab2d655b665def1f7630384031b6e40f30b9e","first_seen":"2026-05-17T19:31:00.910505Z","last_seen":"2026-09-11T03:49:34.360731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4210,"timings":{"blocked":1940,"dns":1,"connect":250,"send":0,"wait":251,"receive":1262,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/B/DD/46/3CABB6C0C059BB21F7F36BE8E9D_DE6EA331_166B8.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.724Z","timestamp":1789098536724,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/B/DD/46/3CABB6C0C059BB21F7F36BE8E9D_DE6EA331_166B8.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 17 Mar 2026 07:38:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 91832\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"166b8-64d336b3b8e80-gzip\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91832,"size_decoded":92848,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x682, components 3","md5":"bdd463cabb6c0c059bb21f7f36be8e9d","sha1":"b300940ce255a8d8baab8941763ead125705f7fb","sha256":"9d20bbde2e702426cfca43bb4e1e53479815d800a937e8456019627a1b6be05b","sha512":"ea39fb28c61d7082b4ef6db55b153d529c0bf27ceb0eb4bc1c71cd45b1fe6c45d8a10dce6d1d09f084a5c66ea4b7b2b06f1b55087c634b027b779f64977f28b5","ssdeep":"1536:qPD6jGY+4zykLHw6VWMtxv2SjUh46A73B4xqLVgLEqh6zpFVrD9KZx+RnQNgzl21:bF+Gdrvtxv2PwBALEMQ/Vf9Kv+RnTwTR","tlshash":"7493023179d92a14ee3c722ab7c2cb56468bd350337d81781bc48ed6f755ab00b4ae82","first_seen":"2026-05-17T19:31:00.84582Z","last_seen":"2026-09-11T03:49:34.363832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3435,"timings":{"blocked":2722,"dns":0,"connect":0,"send":0,"wait":238,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/centerCutImg.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.987Z","timestamp":1789098533987,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/centerCutImg.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6768,"size_decoded":1787,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"79ee6fbf1a81b304315607b6f856be7f","sha1":"3049efa200b46e528f3b40f46569b71db60f1760","sha256":"c40dc99f1bdd732a7a6df44b6a589903a9c5cc827971bd2bd6876794905bb0ce","sha512":"cd1ccd580dc3290b7f560ce4410101d83fc1684d108c22dd7b597abadc0b132106dec305a2ffa7a4a372458aaacba6bb9693ee42a8f96bb76cbc4eb4465d033b","ssdeep":"192:Tk9Ds96CxEo3tP6e34W1PeytSkv8qe8Cg:T+AQ0SChh","tlshash":"cbd1892eb6f72974c9423b6b0e6b43be386bc40343478c287f5c65d95f8050a2ea47b5","first_seen":"2023-03-13T03:41:10Z","last_seen":"2026-09-11T03:49:34.367389Z","times_seen":227,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix03.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.005Z","timestamp":1789098534005,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix03.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix03.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":612,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix06-1.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.008Z","timestamp":1789098534008,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix06-1.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix06-1.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/2026fdck-1.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.019Z","timestamp":1789098534019,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2026fdck-1.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:55 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/2026fdck-1.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":911,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix04.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.778Z","timestamp":1789098534778,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix04.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/F/AB/9B/CAF84FC0F744E1307A68293B97A_1E757137_A2DC8.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.882Z","timestamp":1789098536882,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/F/AB/9B/CAF84FC0F744E1307A68293B97A_1E757137_A2DC8.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Wed, 22 Oct 2025 06:36:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 667080\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"a2dc8-641b98ac22b40-gzip\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667080,"size_decoded":668096,"mime_type":"image/png","magic":"PNG image data, 1080 x 720, 8-bit/color RGB, non-interlaced","md5":"fab9bcaf84fc0f744e1307a68293b97a","sha1":"9b9173efa4296ec925e3e28ffd3e829150507c18","sha256":"defe5d0eb3e52cad3e0d8ef4365bc083eda918367253ca332063f8f0574a0c43","sha512":"f3214d25fe8be0cff157f83697b3adbafaafc61cd4f2941eb356fcb7ed2a10ce16c09726b422b752f9b6e062046a7970be990b47196caaf18cfa52aca912dade","ssdeep":"12288:2kIxSIBMVaVcnSb0+EvLXcIJ/ZsOz8XhyDxt1+GMjWH3MAVnyDZWvep:2zwqWU9FEvVQOARyDx3SW8AVyDZVp","tlshash":"b4e433daf8d912e5e78a31897e220399907fd16ec927b310b4c595b3b45da7038f112f","first_seen":"2026-05-17T19:31:00.88216Z","last_seen":"2026-09-11T03:49:34.36854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4014,"timings":{"blocked":3526,"dns":0,"connect":0,"send":0,"wait":239,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/css/slick.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.973Z","timestamp":1789098533973,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/slick.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3227,"size_decoded":1226,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9073d9a7d9898274b0075adf19e1cee","sha1":"58ad0cad67c4e1f141e11e42b5e6eca53917e9b5","sha256":"29c7919b59f11a21c33f16fe5ccbae8e21b393961fc8fda186f163cf334565c4","sha512":"bfdb864afd99bc643153d7d64440f3dbc0529796b572ae633ff40885a7ccb71658cbc09743336dae0542a9fd2576b64e5e3c8e9e781cbe1ba95dbc22b6db5e32","ssdeep":"","tlshash":"5661a1182561aa468216d4c8be93cb54afdbb4221f3acdeaf551271c83ce5e41ed1287","first_seen":"2026-04-26T20:38:07.165091Z","last_seen":"2026-09-11T03:49:34.371008Z","times_seen":6,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/counter.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.980Z","timestamp":1789098533980,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/counter.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1318,"size_decoded":1002,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (831)","md5":"f0e15593f4ac92837c52def11e96977a","sha1":"dc5ceabc33bb1f6b5aca7b434c4451767e361f68","sha256":"88e3e43d21ee10abc7e1e1325ae15a0cfc63755d17ad9e0102aa1393ab16fb6d","sha512":"ebd3fa35a94c9eeac466ab5a6d39f0f0ca2a0b9f0e2ba0a4ff4fd96a35ff295586f4bb1d9c846a7ce0516871394aec267e1b54d88370dc22558294829a28ed6a","ssdeep":"","tlshash":"732145e01d7719e75e1db6606a0b326d7c75d571261dc0307c0ce1300bb2796b1b6eb9","first_seen":"2023-03-07T12:04:23Z","last_seen":"2026-09-11T03:49:34.371856Z","times_seen":398,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/F/45/45/B65CE382D70D847E18C2B280EB8_12638A78_2CD74.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.449Z","timestamp":1789098536449,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/F/45/45/B65CE382D70D847E18C2B280EB8_12638A78_2CD74.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/F/45/45/B65CE382D70D847E18C2B280EB8_12638A78_2CD74.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/F/45/45/B65CE382D70D847E18C2B280EB8_12638A78_2CD74.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.729Z","timestamp":1789098536729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/F/45/45/B65CE382D70D847E18C2B280EB8_12638A78_2CD74.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Mon, 03 Nov 2025 03:54:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 183668\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"2cd74-642a8aa568600-gzip\"\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183668,"size_decoded":184685,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1088x603, components 3","md5":"f4545b65ce382d70d847e18c2b280eb8","sha1":"ff1d1c8bca114cf3dd8cfb999bd6a4e83266fc7a","sha256":"aa85ae3b3926edbb9d552e056df468ff2bb151f523de30a050182320f02253e8","sha512":"c7c21cc6256e47464d83eccf250bd3ab80753ef8d5fcdc003baa238c7e51ca03f517fdc9eeec7187988b00c6de1d2c6aea8b72469367bb73acf37967648f5d12","ssdeep":"3072:FWBFnGg3gmKMGGnyf/Z6KMO7lMCwrxBr95xt3nbxugWWs9wBXQQ7TY0XbCK5:FWTnJ3VOaS/c/O7e7xBr9Zrwg8yHO0","tlshash":"5004127163351e54cdd75abd1eaa5718e42b90e4b18a0e885fdd0cf5b0b093923ac74b","first_seen":"2026-05-17T19:31:00.867795Z","last_seen":"2026-09-11T03:49:34.37437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3931,"timings":{"blocked":2966,"dns":0,"connect":0,"send":0,"wait":240,"receive":725,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/F/4C/CD/8B99295EEEAD04027AE623F7077_50B55C81_14FCC.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.884Z","timestamp":1789098536884,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/F/4C/CD/8B99295EEEAD04027AE623F7077_50B55C81_14FCC.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Wed, 05 Nov 2025 02:24:59 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 85964\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"14fcc-642cfa7ac14c0-gzip\"\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85964,"size_decoded":86980,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x682, components 3","md5":"f4ccd8b99295eeead04027ae623f7077","sha1":"8d6f4ea5dcd0c25931c252132b70941dd01fb76f","sha256":"63315447b1460f60f63ded56759f9e4ac6ce71ea9fe5e2d48ff84ca363dd0e65","sha512":"1af261e44ef130302c96e2dc563e8ec66d2fdcb6f8ee3d66218ca26c618baeb5d3565e14ccc7ddafcb431eb350a0fd92415f95bf2dc95e14b331b697ec3b8dd7","ssdeep":"1536:q/vUFqOMlTwPVAwuPu/Z/7we3tzZyTSPM4kW/mFcq5jaIC:pqLlTzw227we9zmZJt+IC","tlshash":"c4831282761534070b639b66ecbb9a2f8055c0206cd9673b300cbbbe9fa3d550f5c766","first_seen":"2026-05-17T19:31:00.889045Z","last_seen":"2026-09-11T03:49:34.377273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3779,"timings":{"blocked":3536,"dns":0,"connect":0,"send":0,"wait":240,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.520Z","timestamp":1789098538520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 36274\r\nLast-Modified: Wed, 19 Feb 2020 07:01:50 GMT\r\nConnection: keep-alive\r\nETag: \"5e4cdd5e-8db2\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36274,"size_decoded":36580,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x200, components 3","md5":"7e5d039a1efc18bb7bea97fd777c69af","sha1":"68ef09f74077052dcb97d54c3223d60b3cc8b571","sha256":"49f4dac0c9655023462733d66e03a78de44377c97c6e1c78347a571f93696ba5","sha512":"eb933bd838dfa2cb7b6b4d78b9675ab1243290dba4ab65c49e15ed82e51c10264cc1217ca042cb4d4589c9335f3e03b35788f7c5e982170352fe6c33ffc1cffd","ssdeep":"768:HqqTTVl/XyWz5/SfYem+xeUFFXEBYj5GEeseg5mT25HFwSCJvu0us:Kql5d1iX58UaYXr62X/yvu0us","tlshash":"3df2e1a4a7d09c6cc76715ffdb37f6f0270194709874227a8b982a681d38cf1cae2795","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-09-11T08:54:05.450173Z","times_seen":1799,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":6,"connect":227,"send":0,"wait":463,"receive":12,"ssl":456},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/yosaptvht6oakqvv813zyv433092xz.jpg","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.526Z","timestamp":1789098538526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/yosaptvht6oakqvv813zyv433092xz.jpg HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 276856\r\nLast-Modified: Fri, 13 Jan 2023 09:53:21 GMT\r\nConnection: keep-alive\r\nETag: \"63c12a11-43978\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276856,"size_decoded":277165,"mime_type":"image/png","magic":"PNG image data, 1000 x 200, 8-bit/color RGBA, non-interlaced","md5":"4ef354f5294d774e33f8af4dc58570d5","sha1":"03ed15bc6cc653aa133fd93ef460c4597b9d6b15","sha256":"81d283b3afc1f1a6317c7c428225e6fcd87710baed7fb212f51478c657fa5c1a","sha512":"7b044af22b2ccc32ab7793123027298856949276680eaabb30c45e6bcd60a814e3b74e51b32aa62b8e5f22515bd0ab906b58b9bf78d420979ba820993f7d3d6c","ssdeep":"6144:+DeWbLkZ/hgyR9/f7ljJoJ2yaHeSX59rP7uCOWEYTXCJRL:+6WbL05gMd7XUaHH5ZQIXm1","tlshash":"2f4423b3ae8015df4e8d02f3fb540936e3c965b21f8a7e264a571e9cc7ee96d0910706","first_seen":"2023-05-17T02:16:24Z","last_seen":"2026-09-11T09:17:45.69316Z","times_seen":1711,"resource_available":false,"data":null}},"time_used":2014,"timings":{"blocked":1277,"dns":0,"connect":0,"send":0,"wait":214,"receive":523,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"89tongji.com/tj.js?id=17","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.616Z","timestamp":1789098538616,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /tj.js?id=17 HTTP/1.1\r\nHost: 89tongji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/jquery.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.941Z","timestamp":1789098533941,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 738\r\nLast-Modified: Mon, 06 Apr 2026 20:59:43 GMT\r\nConnection: keep-alive\r\nETag: \"69d41ebf-2e2\"\r\nExpires: Fri, 11 Sep 2026 04:48:54 GMT\r\nCache-Control: max-age=3600\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":738,"size_decoded":1051,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (738), with no line terminators","md5":"84dbd62ab21f9a080a3c75007194d6f4","sha1":"c5e7a0dcb98e094964d941fd44af99c097255501","sha256":"2ba1b5b707262ff63d5557ef29c82e3c5fb59728b65d95b56ad14382f367877b","sha512":"e86349b8322b0e3317d56bdfe0ef17de495872e979b11bf4bf9857983299905753be82bfea15028e6dfcb00ce5273725e074061d3fc0714c11310a5755b0536e","ssdeep":"","tlshash":"ed01fbd887c4d85f6ecc5d53ea14deca62b2812b97d971838328fe8c05a9152c85c489","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-09-11T08:46:58.716869Z","times_seen":372,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":117,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/pc-sear.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.550Z","timestamp":1789098536550,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/pc-sear.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/03.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.582Z","timestamp":1789098536582,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/03.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 211701\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"33af5-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211701,"size_decoded":212718,"mime_type":"image/png","magic":"PNG image data, 579 x 369, 8-bit/color RGBA, non-interlaced","md5":"ce76cf4c6bd9c5a11e51c46a1db9e4ba","sha1":"6b0337126247fb1e2356336c2db05e3eec688ce1","sha256":"92d73f6a3f76975e19a2d9b0b2c888e77b88659d4e526445d9234ea81d967bf3","sha512":"eb0c8bdc064cd0d0f14653ba060f2599fd1e8eb2759cf74d97fa29e46092d151eb91767d77370e71d2ed2d973e6a1071af07c06476d6e8a78a4bd869e99f0150","ssdeep":"3072:8IMPxXYDA41KReWOEy/ViVxT1YDN74H3/4Zg4dDAJLywc24SbDidXFL1UNf5lo37:fM5oDP1Ku2VxT1l3ADAJLHFmX1SLoore","tlshash":"64242320207ccc64f16a3ba94581ad6578bed1bc55e10ffacc67d998f818a48b387f4d","first_seen":"2026-05-17T19:31:00.890394Z","last_seen":"2026-09-11T03:49:34.382205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3591,"timings":{"blocked":1911,"dns":0,"connect":241,"send":0,"wait":239,"receive":718,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/icon-date.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.726Z","timestamp":1789098536726,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/icon-date.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 304\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"130-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304,"size_decoded":1315,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"4a7661a3e94fd89a6bd026629bf70eca","sha1":"5d65fbab549e23e3a0d57b8f321a4861938166f5","sha256":"bdaf1e87d7fd7663da3d25c3dc830153ff43e416d18eb4fcecc074105ec8721d","sha512":"a2014a5d9f8efe8888e1bb62ad6630ef1b583fded54af716279aab1b578bb507346f07f80b1b3debbb59b428f5d5f2aa1f6908273dfaaf98410bb5d236dd426e","ssdeep":"","tlshash":"21e07dd256907dbdcee92db21a2fe423a42a324d4217030dcf4cd0161440e6645c1786","first_seen":"2026-05-17T19:31:00.88465Z","last_seen":"2026-09-11T03:49:34.384503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2968,"timings":{"blocked":2729,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/9ac8ygliapz5ww4p3uuacykkfhn6am4w6t6hqand.png","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.519Z","timestamp":1789098538519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/9ac8ygliapz5ww4p3uuacykkfhn6am4w6t6hqand.png HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 178073\r\nLast-Modified: Fri, 14 Jun 2024 06:35:05 GMT\r\nConnection: keep-alive\r\nETag: \"666be499-2b799\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178073,"size_decoded":178381,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 200","md5":"f10b57811b5cbd80cc2adb677fcbe3e2","sha1":"9c566090638bacef4fb11e5ce3798f6162f52770","sha256":"f4d197904303977c5b8764801ab45de427c7ea38e212e9e158aff5b3bdad6473","sha512":"f3665bcd909bba365acb53d64a6e95d2e1212eaf4f1f8a31419611e1d9a839366f058b9014caa35a429e8492643d49ea7937afce230f8fae1846317ab0a92893","ssdeep":"3072:kmOFOk0AYABeHXNScStRzJmQ3aNIYlmwLs6CLWBOcV8u2OPvr8qFw8Y79C6vaQgL:1AboHXNXStRzAUauwLaLWBOW7hw8elGV","tlshash":"4c0412697de7e838c12bd8d7c2cc57984810cc7c929d4023a6a74d406a77af2ce8d7ca","first_seen":"2024-02-16T22:50:56Z","last_seen":"2026-09-11T09:17:45.695422Z","times_seen":1206,"resource_available":false,"data":null}},"time_used":1682,"timings":{"blocked":-1,"dns":7,"connect":217,"send":0,"wait":442,"receive":579,"ssl":436},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix10.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.013Z","timestamp":1789098534013,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix10.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix10.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":753,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/search.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.014Z","timestamp":1789098534014,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/search.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/search.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":951,"timings":{"blocked":803,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/pc-sear.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.407Z","timestamp":1789098536407,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/pc-sear.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/pc-sear.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/more.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.441Z","timestamp":1789098536441,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/more.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/css/style.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/more.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/icon-date.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.447Z","timestamp":1789098536447,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/icon-date.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/css/style.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/icon-date.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/dynclicks.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.981Z","timestamp":1789098533981,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/dynclicks.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3369,"size_decoded":1360,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"5157382605664ad2c8eec733c257aab8","sha1":"7f13185959f873bf946289a1449176103919fed2","sha256":"1b5f20c219d37427be2c6b019f2cc625ef8d8bf5fe13b46c246532428ff5efee","sha512":"fb4e8b4c6cee1bcddf7c00f8b559b6be08213c439ea7ecbb9d7a6c365dfc4d765cf32d978dcaba11865e7c592fa53f2836678e9c44842318fdee428be1ad69ea","ssdeep":"","tlshash":"436101f4b7b96020111328b80b5fd340f0b594176b94cc58ba2cba55af5c625adf8eee","first_seen":"2023-03-07T12:04:23Z","last_seen":"2026-09-11T03:49:34.388632Z","times_seen":352,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/jquery.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.991Z","timestamp":1789098533991,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":87447,"size_decoded":34440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65535)","md5":"9118a78f3235edaabf366ba70b89a9f6","sha1":"924f5326c2f165cca6f94aafdd2dd625ed3467b0","sha256":"cd75c40c731eb9e4ba6bc7792c4366903ac6d1490b918a63fc55d4b8e7051ac3","sha512":"1a177a1043ff3ab2b6af9cbca710b11ded8e0cdf95415f65fa9b6d898e25a9d4e7fcab90950466883b763a4e45d996daec1549958b70f5e5f924a2ad5fb86a00","ssdeep":"1536:ERUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4agocVi8SMBQ47GK7:8HNwcv9VBQpLF88SMBQ47GK7","tlshash":"2883f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2025-10-10T11:19:39.170483Z","last_seen":"2026-09-11T03:49:34.389415Z","times_seen":13,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":370,"dns":0,"connect":0,"send":0,"wait":140,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix02.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.004Z","timestamp":1789098534004,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix02.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix02.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":523,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix02.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.685Z","timestamp":1789098534685,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix02.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix05.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.807Z","timestamp":1789098534807,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix05.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix06-1.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.828Z","timestamp":1789098534828,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix06-1.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/title.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:55.047Z","timestamp":1789098535047,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/title.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/01.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.430Z","timestamp":1789098536430,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/01.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/01.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/css/bootstrap.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.944Z","timestamp":1789098533944,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/bootstrap.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145195,"size_decoded":26375,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (540)","md5":"c3a97f177e71972d8e4c35f4c4aa15ff","sha1":"9bfcfd51b85060c00a4d37d2e9ba392c6fcc647e","sha256":"14129426590adfaed99434e3c3e014ed63616ea15f52a04da11c1fd5e77c179e","sha512":"9e0364f6da04bfdc3030fb4225534f028838c4a8a826826e76e7c96a6f8358abbe4d16d156b0b52c3234cb19f644681306d616967cffc87694a2222f9c39656d","ssdeep":"1536:68QvmSUZjywX7H53/BHsWj8g1UCFz96nOdG/JP9IZptcJ23NsOCjp:6lUZO4ZpHkgCc8nOU/JP9IZptcJ232","tlshash":"07e394d8f6b039407223c09835938e52b71d9143d41fed79b7ea35acafc81958973b8a","first_seen":"2026-06-13T13:24:29.849431Z","last_seen":"2026-09-11T03:49:34.390121Z","times_seen":4,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":117,"send":0,"wait":164,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix07.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.871Z","timestamp":1789098534871,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix07.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix10.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.909Z","timestamp":1789098534909,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix10.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/vinb9ufmfncf975y9rvx382nt7h7123khi4lo6kk.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.524Z","timestamp":1789098538524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/vinb9ufmfncf975y9rvx382nt7h7123khi4lo6kk.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 214316\r\nLast-Modified: Thu, 14 Nov 2019 06:29:46 GMT\r\nConnection: keep-alive\r\nETag: \"5dccf45a-3452c\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214316,"size_decoded":214624,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop CC 2014 (Windows), datetime=2019-09-30T17:50:59+08:00], progressive, precision 8, 1020x255, components 3","md5":"8fbc123b4636b3c9a8f1411c160a9e99","sha1":"48f62c4c22122a04026a1e329bccce93fc7aae77","sha256":"69f497a64f8dab090cb547e5f9063b1c33d0d8fc87573f87eff1016fb2d4dad5","sha512":"821f26949d9b21304202d7cd0945a3351e3420ebba3d129b6111176978e3a5ba1e4135a963042eaa59be817cf02182f8761c7a0ba2fd9271c4b53304d69a3671","ssdeep":"6144:p5K6mEbeWe5b5/AT6dvesgRvyNlbc+6cKO90asTGIo5lj:u6tbeWe59oudvpg5yPblXKUIGlj","tlshash":"cb24130bfa57e081d29a4db4c077677cdc4f8b56aaa4563ae66c2c2cc7d05c3b0ad246","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-09-11T09:17:45.692613Z","times_seen":2166,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":-1,"dns":3,"connect":215,"send":0,"wait":434,"receive":690,"ssl":434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/css/animate.min.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.942Z","timestamp":1789098533942,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58760,"size_decoded":5063,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cebb31519c4c140ae6b01da5386ae44b","sha1":"9b56320346890a4a83c6b88709c001dac7e5ec3c","sha256":"c52c21a5a3749fd410d85b792a035b0f79c27518f000f5fc24c9ccd7f2f62b8e","sha512":"b4b3160dad2f07362ab453e65c331443811e05b6b6bdff1eca866051f1ed0f0074ccb62549c5db647fc7655b39f90999cdf726017e9bda0fc5adca361dcae9aa","ssdeep":"1536:bJCLJCsIZjFMhZBJWJZWyPQhvMAJGJ2pBWlBfA9JQJcu:bJUJ1JWJkJGJIJQJ7","tlshash":"c1430b9e0990168455668e5687cc5eb40b6cc673183a1cef33862c4fcbdbbcc63da65b","first_seen":"2025-12-26T03:01:37.22563Z","last_seen":"2026-09-11T03:49:34.391546Z","times_seen":7,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":112,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/news/mp4video.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.990Z","timestamp":1789098533990,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/news/mp4video.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7146,"size_decoded":3137,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (314)","md5":"bd68cb487d57362e09db4e9bd250fce8","sha1":"42c4a3c6903ba0e6995b74f52c70feb09e99c992","sha256":"12ab7535c30920b09e25febf02af50917a77dccef85520def4d6ac1a2c3ba398","sha512":"9e2e2a8607574950381109348d46dacf22abcf19d57cbf439e940462278886a85e5124da24abcaa871466e53317a3856bab965a6522d8a1fa345d367f9d4ea98","ssdeep":"192:rD6hVMTDWFX6XufqRbLvSnqXzOnJaJQiT35xnAde:rD6FFX6e4LvayzOnJC530g","tlshash":"4ce1b539cb92206b181723646fdac00431f5d4036359cac8bd1e7866af68a9957b9ff8","first_seen":"2023-03-08T01:04:44Z","last_seen":"2026-09-11T03:49:34.392298Z","times_seen":36,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":370,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/wow.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.995Z","timestamp":1789098533995,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6974,"size_decoded":2801,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6971), with no line terminators","md5":"144241475e229591ee027ffc60b0e278","sha1":"dc559b21eb788d8c8aed1e0329de1f5db1ec41ee","sha256":"02228e00e20f3d087d48d4150521711ea7abeab713afdd7f7e1d19b3776c1416","sha512":"00cc664fcfda0a63501bb80e39ea3dbf70643c028b5031422294c6ae4c9a066f72f6bb1eefa20543b2dc9bb265eb6c4e6dc135ddef08c9d2f4d02b97b37f120a","ssdeep":"96:wPV6GqKyR6TYATHF/suCg5OVEE1nce1gJ1IHImBaokbl:wPVfSWFsuCsOVEENceiJmHILoe","tlshash":"91e177c9bb877031c75791f1873f0546b33a59ada028047cb6a984e53d74c69523bf78","first_seen":"2023-05-20T11:27:53Z","last_seen":"2026-09-11T13:37:51.882069Z","times_seen":155,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":474,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dajiafa888.com:22118/fcl.php?keyword=%E4%B8%AD%E5%9B%BD%C2%B736365%E7%BA%BF%E8%B7%AF%E6%A3%80%E6%B5%8B%E4%B8%AD%E5%BF%83(%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8)-Official%20Website\u0026from=pc\u0026originUrl=http%3A%2F%2Flqcx.dgyuehuiwan.com%2F\u0026referer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026v=10445","fqdn":"dajiafa888.com","domain":"dajiafa888.com","tld":"com"},"ip":{"addr":"143.92.57.36","port":22118,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.395Z","timestamp":1789098536395,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dajiafa888.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 12:27:00 GMT","end":"Mon, 02 Nov 2026 12:26:59 GMT"},"fingerprint":{"sha1":"DE:95:A8:06:94:E1:49:42:89:6C:30:DA:00:5F:5C:DE:8B:29:30:62","sha256":"1D:6B:A6:63:DC:3F:25:7E:5B:F0:57:16:28:88:72:F5:D6:D8:3B:F7:E7:D9:6B:2B:9E:4F:32:0F:13:18:AC:2E"}}},"request":{"raw":"GET /fcl.php?keyword=%E4%B8%AD%E5%9B%BD%C2%B736365%E7%BA%BF%E8%B7%AF%E6%A3%80%E6%B5%8B%E4%B8%AD%E5%BF%83(%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8)-Official%20Website\u0026from=pc\u0026originUrl=http%3A%2F%2Flqcx.dgyuehuiwan.com%2F\u0026referer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026v=10445 HTTP/1.1\r\nHost: dajiafa888.com:22118\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://lqcx.dgyuehuiwan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:58 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":2857,"size_decoded":1265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1842), with CRLF line terminators","md5":"27ba0837d87ab2aa60672f4c789d7dff","sha1":"7fcdbe691a48724036c0dfa82d76d07587895de4","sha256":"78d173c0fe93bdd55973e49f1ea12cd6e33b7aa146e921408613f3d85f3708cc","sha512":"fa078b01c59b171f85d3a19053ed852841b2ab498ff31de0bb887a63d0858a497d0aac0dea4699d57b7ceb14aadf9ca76de8b7b80fe703f03746bacf7d850fbf","ssdeep":"","tlshash":"2c511e6382c8944f8a61e044d338faea6653242ecf73ac4bfe64559fda014ea89534cd","first_seen":"2026-09-10T21:18:12.294563Z","last_seen":"2026-09-11T03:49:34.394689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2070,"timings":{"blocked":0,"dns":87,"connect":216,"send":0,"wait":252,"receive":0,"ssl":1515},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/F/AB/9B/CAF84FC0F744E1307A68293B97A_1E757137_A2DC8.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.444Z","timestamp":1789098536444,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/F/AB/9B/CAF84FC0F744E1307A68293B97A_1E757137_A2DC8.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/F/AB/9B/CAF84FC0F744E1307A68293B97A_1E757137_A2DC8.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/5/11/4B/8DCBA4F7A201172777F66CEC488_FDBF17A2_C021.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.871Z","timestamp":1789098536871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/5/11/4B/8DCBA4F7A201172777F66CEC488_FDBF17A2_C021.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 11 Nov 2025 05:55:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 49185\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"c021-6434b4cf50c40-gzip\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49185,"size_decoded":50199,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x489, components 3","md5":"5114b8dcba4f7a201172777f66cec488","sha1":"437c18bf9c4e0df9cb9006e50ae3f5aebde08eaa","sha256":"c7b7a6a8d9a9015339516443b6d5cf1fac1e8d4b1a3611762866b8f42f6ae987","sha512":"ea07aa7fa85a5de33ba6e910d1e4f5e9bb874d757eb0a3536fa79016ed25608f4bf4affb3e354c88ffb0fabfc4c7e9b9c82b0c8ed62a962529c3ed710466b6fc","ssdeep":"1536:I9SRBt5H+AxZ3F/yaUnwDuDj/p6IQq1+0WqoxU6rz:95+AxZ3ByOm/oFq963","tlshash":"3f23e147edcd15ab9dd94f787b2a08385be12719e05839f800b7ebcb73a1ca58d2d064","first_seen":"2026-05-17T19:31:00.871453Z","last_seen":"2026-09-11T03:49:34.396923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3775,"timings":{"blocked":3535,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.615Z","timestamp":1789098538615,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix06.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.846Z","timestamp":1789098534846,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix06.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:48:52.522Z","timestamp":1789098532522,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix01.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.003Z","timestamp":1789098534003,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix01.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix01.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/close.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.016Z","timestamp":1789098534016,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/close.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/close.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":977,"timings":{"blocked":845,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/tt-right.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.018Z","timestamp":1789098534018,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/tt-right.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/tt-right.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":1028,"timings":{"blocked":885,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/5/11/4B/8DCBA4F7A201172777F66CEC488_FDBF17A2_C021.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.451Z","timestamp":1789098536451,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/5/11/4B/8DCBA4F7A201172777F66CEC488_FDBF17A2_C021.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/5/11/4B/8DCBA4F7A201172777F66CEC488_FDBF17A2_C021.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/uqpu1x4t749lwvxkguwwsdova106pr.jpg","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.521Z","timestamp":1789098538521,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/uqpu1x4t749lwvxkguwwsdova106pr.jpg HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 200943\r\nLast-Modified: Fri, 30 Sep 2022 18:42:07 GMT\r\nConnection: keep-alive\r\nETag: \"6337387f-310ef\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200943,"size_decoded":201252,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x200, components 3","md5":"93b5fd25fa34d9f1f81869e9aa56dda7","sha1":"dc51916e54c77eb33536ba9acb346fc1e86cbe62","sha256":"e612039673cad23b189f1b221bb32b9f8133ea1327fb12e3ea5ef4723606efb4","sha512":"31ebdd12f3bf07d18fb093b3ea7e3783f1242ad253c494413286a5c3403ac2c208904b3bfc067a4c8933628876507889b07fe23361818d2cf5d931139325cfde","ssdeep":"6144:e8qa7OrrWXdlKyAcrn9Y1OhN8zvJ20dJj6SI:4a7Oyd0ncm12kvj6SI","tlshash":"a91412342adb8aececd6b579af1017a6114b0df2d4499fd3c634a838967e20b0d5bd70","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-09-11T09:17:45.692032Z","times_seen":2387,"resource_available":false,"data":null}},"time_used":1869,"timings":{"blocked":-1,"dns":5,"connect":228,"send":0,"wait":476,"receive":700,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/formfunc.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.986Z","timestamp":1789098533986,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/formfunc.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1143,"size_decoded":724,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"dd6eecbb5a8b8d7433b057ca0278621d","sha1":"4ea275b6760de618db4590e04379b6c2ed6578a0","sha256":"59866fb5b72e7b5e648e9e08d5b6071f0bc5a95273d500b1917161f4c52448a0","sha512":"83329157e933e69427f79809e3632ee3a181b9f9c2cccad4ec877c2138e53254d8042ffee18914c71cf6aff66949679f683ac8aeb5790bc95e54602010491cfc","ssdeep":"","tlshash":"8921990ea1a230a0a793a67d47af8344b0b66417014ad920fe2cd5e48f15a445a9fff9","first_seen":"2023-06-02T14:27:10Z","last_seen":"2026-09-11T03:49:34.406799Z","times_seen":286,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/01.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.577Z","timestamp":1789098536577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/01.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 295640\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"482d8-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295640,"size_decoded":296657,"mime_type":"image/png","magic":"PNG image data, 820 x 509, 8-bit/color RGBA, non-interlaced","md5":"515a2b92f8214feb3db351a344c295e5","sha1":"05372aa65b6f0e7375b92ccb2c42060048e6836f","sha256":"376008019ef5559ea997f1707c5b16c9022152bac84b7db7a42b49f02d0abe89","sha512":"8a83373f12a81cb28ebf13e13bf235c01d12cd90d16142ba64bffca703e9b5570bb04157b703ddd7f2b63b3631dc4b4e5ce6b4aaa28e8050f9ba573c5db35f07","ssdeep":"6144:+vgfeHCyW9RF3bL+//uvICLDXY1JyN3vKyTY86RfK:+o6Wp3Hg/uvH/XYHyS8MC","tlshash":"505423a7f57ac8767413d5d437f316a4923e3dd3c1d34d82b260daac463a856086cbe2","first_seen":"2026-05-17T19:31:00.924088Z","last_seen":"2026-09-11T03:49:34.40796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3827,"timings":{"blocked":1916,"dns":0,"connect":239,"send":0,"wait":239,"receive":953,"ssl":480},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/w1ldefq37i5y25na7cemsopbpww2nu.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.516Z","timestamp":1789098538516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/w1ldefq37i5y25na7cemsopbpww2nu.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 162061\r\nLast-Modified: Fri, 14 Jun 2024 06:33:54 GMT\r\nConnection: keep-alive\r\nETag: \"666be452-2790d\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162061,"size_decoded":162369,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"4fb4afe26198c3287fb8e1a05be78270","sha1":"7f2f7b226aef1c717e47b49c29301efa77568374","sha256":"238929b5dc9d4726fd89356e5a33fa365a42d4168943a3934cb7753170bcc7fa","sha512":"5ff12adcefc3bad13c9130fcdd3a3d6c9917ee840bb63d31d5ad8901a770992b24a3a35babd62d4b6ba96898c403a228f38a157fb672addef9d1e40825679fdc","ssdeep":"3072:kW4NNuRHKOxC/DmufPzz76plgJXaBz7KT44Oz8vbM:kWuuRqUC/Dmuf7z7sqXaBz7KU4W8vbM","tlshash":"6ef3123900c89622ae6e3b2d157d86c59556f962acb02eff3b911378aff50df80054ed","first_seen":"2024-02-16T03:28:22Z","last_seen":"2026-09-11T08:46:58.714328Z","times_seen":413,"resource_available":false,"data":null}},"time_used":1849,"timings":{"blocked":-1,"dns":10,"connect":225,"send":0,"wait":450,"receive":712,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/ndo5u75d8mk1is8ldrdhiw1h429tnk.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.524Z","timestamp":1789098538524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/ndo5u75d8mk1is8ldrdhiw1h429tnk.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 458771\r\nLast-Modified: Tue, 11 May 2021 11:49:00 GMT\r\nConnection: keep-alive\r\nETag: \"609a6f2c-70013\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458771,"size_decoded":459079,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"70f984740f0767b3a77491391f9fd051","sha1":"315ee281e1f8d78a98c9495ae21a85620f52365e","sha256":"8ca0d1746eea53fd71559c3903ea72e3c7020cbd546667c32511257fdc53dff6","sha512":"6a3c8cd2ceca01d278bc2affca199747c7c1c2318ac74f67bfbfed3027c9fec60102c513c1460edef51b9e6d0d0c4dcea3ade2b62c66f9b9a22960fab7769c59","ssdeep":"12288:LKGXVMvoygGLsJBQQNIqwVYHLMuJNEJnSftlyTAUozFb:hXWVhkFweLMuqSVI36","tlshash":"9ea42312575a395c0ab3a8e35c26ff8b4d35a1962322f03aa30fe57fd4404e794b6763","first_seen":"2023-10-31T02:49:06Z","last_seen":"2026-09-11T09:17:45.69594Z","times_seen":2191,"resource_available":false,"data":null}},"time_used":2662,"timings":{"blocked":1147,"dns":0,"connect":0,"send":0,"wait":235,"receive":1280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/_sitegray/_sitegray_d.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.976Z","timestamp":1789098533976,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /_sitegray/_sitegray_d.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":255,"mime_type":"text/css; charset=utf-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-09-11T13:35:17.797008Z","times_seen":234709,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":112,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/ajax.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.988Z","timestamp":1789098533988,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/ajax.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6538,"size_decoded":2546,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"8c3557e6b190d68fdfb0b1f62190a295","sha1":"09318e55310de64e033e0bbd9d365afe4a6195d0","sha256":"6eff5fb5ab1c407b678131e1d4416294c9b2ffa68847608f6d479ca6bd631a86","sha512":"1cd485971d5a824fbe90426f6c1c841eadbe85620c93bebe3dfd9601b678b70aa1463f5cc996c7728207f430a2ad6b7d92134012099a8646ee853cf477571dbb","ssdeep":"192:HoPQrdB3UzhVVSkTU/Ey7IEo92448aCyV5R7qyKY:IajklVgkgNK2DaY","tlshash":"dad19388ba8e20a9651b753c9f9fc260d9755d133d84cc10be9c85c03f64b1869cebee","first_seen":"2025-05-20T14:51:17.99082Z","last_seen":"2026-09-11T03:49:34.415283Z","times_seen":326,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":331,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/yzxx2026.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.002Z","timestamp":1789098534002,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/yzxx2026.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/yzxx2026.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":508,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix07.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.009Z","timestamp":1789098534009,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix07.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix07.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":715,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/B/DD/46/3CABB6C0C059BB21F7F36BE8E9D_DE6EA331_166B8.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.442Z","timestamp":1789098536442,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/B/DD/46/3CABB6C0C059BB21F7F36BE8E9D_DE6EA331_166B8.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/B/DD/46/3CABB6C0C059BB21F7F36BE8E9D_DE6EA331_166B8.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/title-lind.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.689Z","timestamp":1789098536689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/title-lind.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 406\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"196-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406,"size_decoded":1418,"mime_type":"image/png","magic":"PNG image data, 227 x 9, 8-bit/color RGBA, non-interlaced","md5":"b3e6a6e7bc964dd3d86ee6539b095434","sha1":"8c4de843a3ba146ecd7050426badbcfbd157ed65","sha256":"efba4baff4261add7501fa1cf55a218aea344c5cccc2d7be038536bcdd0d7fa8","sha512":"fdf19b1483ee0f8439be92b6b2613efef866866b2f915d4a55a85fc01f02943304c1ac64f55f71c377e6f146c8f3a0bed4572ccd776e722dbb1850f81e36b3c9","ssdeep":"","tlshash":"1ae0f1e3c773ce6882e1453345a081220c2791cad22e3a9d2c12f54dafeab171d46a8d","first_seen":"2026-05-17T19:31:00.859203Z","last_seen":"2026-09-11T03:49:34.416725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2758,"timings":{"blocked":1804,"dns":0,"connect":237,"send":0,"wait":238,"receive":0,"ssl":479},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/jquery.la.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.494Z","timestamp":1789098538494,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /jquery.la.min.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:58 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 06 Apr 2026 20:59:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69d41ebf-4bd\"\r\nExpires: Fri, 11 Sep 2026 04:48:58 GMT\r\nCache-Control: max-age=3600\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1213,"size_decoded":826,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554), with CRLF line terminators","md5":"461822110d01cf662bd3390d67a34843","sha1":"00bf5f907fd79f045ceb061a567d1068015ca5c4","sha256":"9df6bbbb8058668687d29f8a563e6154f5ec70744135be7bfd35cf3295298e61","sha512":"66569b961b5bdced9cfa15b4199348f20f32decbf65c183575d0ece80dc1b33eb9f9c4e3db4288bedafbe474afbdfbbc03872e849fbe5220f5355d4bdf1b267b","ssdeep":"","tlshash":"2a21f15f7c06e3186a91296637b7edacd9ed1031500ac80659eac0ac6c29ff90113b4c","first_seen":"2023-10-31T02:49:05Z","last_seen":"2026-09-11T08:46:58.721424Z","times_seen":36,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/73in1fspksw4vkiz33cink1f95gkt6.png","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.523Z","timestamp":1789098538523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/73in1fspksw4vkiz33cink1f95gkt6.png HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 85269\r\nLast-Modified: Thu, 30 May 2024 07:57:09 GMT\r\nConnection: keep-alive\r\nETag: \"66583155-14d15\"\r\nExpires: Sun, 11 Oct 2026 03:48:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85269,"size_decoded":85576,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1000x200, components 3","md5":"dd634dd0e0dd49206dcc5895ead43e77","sha1":"1ed15d3f4c9f439901ad35e48e997cd61e21da0c","sha256":"e5bd386dd7f166c21d2b28383dc15fc365a6a9dcad30f3d31ea03ade011f980c","sha512":"520f5c0aaa03859ad2b7a39b5aab91564d24efc9e54f802d07a2e0922089836fd44e43caba81c133e1344efee4d923759abf5bbb60b03049f0ff09c9ab924ec3","ssdeep":"1536:ghHfCs1mEmhYj/SLO+lC1zjLUKOjQ6FmkyjQ5UpshRm6gccXc5s5+IsI0h:YfC2m3qQCZXoDmkyjQjhR/BcM210h","tlshash":"6a83020460391e2efad6bc306e2d59bf96a59012e3a7d2b774e6386ff3b8130114c54e","first_seen":"2024-06-02T21:28:55Z","last_seen":"2026-09-11T09:17:45.687356Z","times_seen":2208,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":4,"connect":211,"send":0,"wait":423,"receive":229,"ssl":425},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:48:52.964Z","timestamp":1789098532964,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:53 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":35281,"size_decoded":10294,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (561), with CRLF, LF line terminators","md5":"a6667a0a5af77075b39d99be321f00f8","sha1":"565f9e612d07d8a2c52def5e3b974cfefc3153b7","sha256":"21f163541f5bf0eb3f51477f99ace7956367121ea3739f5edd5baab5362a747c","sha512":"3cab70fccefec32a9d2090dbf419ae23370cc05a91a7308b3baf709c67ad1e7158978106c5e6cf0ab78d66a1335986f35e74a38b0cb5cc7efdd77cb0a501aaf5","ssdeep":"768:yjkaE1ZwO0QUVUSKA9kUQuxMnUUKk9dXa7cC:GhE1ZgUYkUgPjdXa7cC","tlshash":"51f2ea2295caac67058314b599b6d32f4147d627fa2b6e01b7fc07c9afc4fe28d13149","first_seen":"2026-06-13T13:24:29.869685Z","last_seen":"2026-09-11T08:46:58.716171Z","times_seen":5,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":481,"connect":118,"send":0,"wait":276,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix09.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.013Z","timestamp":1789098534013,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix09.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix09.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":782,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix01.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.670Z","timestamp":1789098534670,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix01.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/yzxx2026.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.681Z","timestamp":1789098534681,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/yzxx2026.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix08.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.911Z","timestamp":1789098534911,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix08.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix09.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.936Z","timestamp":1789098534936,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix09.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/8/15/A3/0D70E889301644CC89FB66B887D_14DB7BCD_331D5.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.450Z","timestamp":1789098536450,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/8/15/A3/0D70E889301644CC89FB66B887D_14DB7BCD_331D5.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/8/15/A3/0D70E889301644CC89FB66B887D_14DB7BCD_331D5.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/index.vsb.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.978Z","timestamp":1789098533978,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.vsb.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":174,"size_decoded":389,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a88c2ad94d9ad79ecaed4d9e8678cdd","sha1":"220caafe4e30a0399d6b04d9ee02bada167be0cf","sha256":"2e2196bae02dcd91782a170ef66fe727fb0f2a03bbb8a225f52b5e073ccb7307","sha512":"e8cd1b8a99222854dedc68e6e0cad1b28866ce3be8c99bbbdbac3d4d8e3415ad9aa3e748b5b4dac5eb64279ce504e37a55bc01bea4b5d6a81cb53b5768244fb4","ssdeep":"","tlshash":"c2c0c0b002082a01303ddb4524b8c7972210e01f7326611c45dbf400d5be3880435493","first_seen":"2026-06-13T13:24:29.862583Z","last_seen":"2026-09-11T03:49:34.423419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/bootstrap.min.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.992Z","timestamp":1789098533992,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":35786,"size_decoded":11139,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"2afa0caf5a8e6213fb0d29ef8819fec9","sha1":"87a1e8a28217e78acf39d40a8cc01b9cb1e0a151","sha256":"76bfa45115a6ee193ef19e2a29f2bca13bf8fbb987016f453b2e50593a6cdf74","sha512":"85093ebe83ca9d219aa504602a6f66b3d9a8cc35264c3e05c62a2974ec6b07021b63b85460b0e9c13e4bd5958c92c346b4b49c886544733647c69843092a81d4","ssdeep":"768:Rl1ZD27UwlNZMl9/qahCu+jS1g8ep0sUCvFXfl0KGf3ZlRQ:HO70GS1K9vlS3Z7Q","tlshash":"eaf28606b23031a147dfb1e1515b020a72396a7ee906907c38b9dae53db5c48717bf3d","first_seen":"2025-12-26T20:41:59.790612Z","last_seen":"2026-09-11T03:49:34.42426Z","times_seen":7,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":374,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/fix03.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.772Z","timestamp":1789098534772,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix03.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/close.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:55.003Z","timestamp":1789098535003,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/close.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/02.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.432Z","timestamp":1789098536432,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/02.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/02.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/play.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.448Z","timestamp":1789098536448,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/play.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/css/style.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/play.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/3/12/B4/DBB1D9AD38A17A1D6DDDC704B51_D111FFC2_2CBA2.jpg","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.449Z","timestamp":1789098536449,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/3/12/B4/DBB1D9AD38A17A1D6DDDC704B51_D111FFC2_2CBA2.jpg HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/3/12/B4/DBB1D9AD38A17A1D6DDDC704B51_D111FFC2_2CBA2.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/more.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.706Z","timestamp":1789098536706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/more.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 666\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"29a-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":1678,"mime_type":"image/png","magic":"PNG image data, 44 x 17, 8-bit/color RGBA, non-interlaced","md5":"0e85b204a80a8ff30322ef9ea556a50c","sha1":"364951c6702abeae31afbfd2346239fe7500e1a5","sha256":"b5040c2dc7b61ff7b7e12e275aea1c3e33429e1aa4d2b260481a315837bc73f6","sha512":"d06d2cab708e4362300119d84ea3e63ad16bab614d1118bbb9ba01d8fed7b6c20b2e9eac127a26f717f8a48214f886c317f4ebf1f3cf09e7f2422db7abef9c4f","ssdeep":"","tlshash":"550188776fc00c7f3f205237836f75e0b32509f8243d3055a11179a5521790d3566e90","first_seen":"2026-05-17T19:31:00.860823Z","last_seen":"2026-09-11T03:49:34.425248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2747,"timings":{"blocked":1786,"dns":0,"connect":241,"send":0,"wait":239,"receive":0,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/common.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.993Z","timestamp":1789098533993,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/common.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3078,"size_decoded":918,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0902f073d88cf56f02abf78744d60ad2","sha1":"7ce8cce4151ccf94d0b8b07e5ed4c04c101b3aaf","sha256":"f3e3705449947e116f0116257d622dfa0a82795945ae400229f6ec7594ea97ac","sha512":"e29962f02286ecb6c8e8a0598c5b56dd36f8d4a3da9f40539de5d02b0d7a55264386ce584f36decf4051a44630640e5c51129c86f1ce410e25c6e4569a8bcbe7","ssdeep":"","tlshash":"76517648f072d27510f738764e2ff5107e8bd01be288c900f6ac08f5af58995d976b8a","first_seen":"2026-06-13T13:24:29.875194Z","last_seen":"2026-09-11T03:49:34.428786Z","times_seen":4,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/logo.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.973Z","timestamp":1789098534973,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/search.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.976Z","timestamp":1789098534976,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/search.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/2026fdck-1.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:55.072Z","timestamp":1789098535072,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/2026fdck-1.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/back.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.404Z","timestamp":1789098536404,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/back.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/css/style.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/back.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/title-lind.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.439Z","timestamp":1789098536439,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/title-lind.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/css/style.css\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/title-lind.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/8/15/A3/0D70E889301644CC89FB66B887D_14DB7BCD_331D5.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.862Z","timestamp":1789098536862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/8/15/A3/0D70E889301644CC89FB66B887D_14DB7BCD_331D5.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Mon, 03 Nov 2025 08:37:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 209365\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"331d5-642ac9ea9cc00-gzip\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209365,"size_decoded":210382,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1284x1299, components 3","md5":"815a30d70e889301644cc89fb66b887d","sha1":"f7e2c7b03a11e90166205b8b8eb178131bd762bc","sha256":"30d848cb03e40f32a65741d4fa4b073dfb1ca55b56595f977a5c049937436c90","sha512":"7c05efc7b593497585e68b2e9ed0a351fd44f620d0a3913a9134dd64b872c6e2627f08474b6a64fcada74e89b867716a6227ac48f0ad8485967b308b7000f055","ssdeep":"6144:kTZbbuG+ix8jcXHpkzDlrtpl90WptXke2R4H0a2V:ebbu5ZkH+hRp5ptrw","tlshash":"34142326ff9cec69e959b5b2c3054dae3a6398d28bc6dc5a263013c658f391336105fc","first_seen":"2026-05-17T19:31:00.877353Z","last_seen":"2026-09-11T03:49:34.429452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3557,"timings":{"blocked":3312,"dns":0,"connect":0,"send":0,"wait":239,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/3/A1/72/6D4199786EE878501F449F26F77_489527B0_B9916.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.964Z","timestamp":1789098536964,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/3/A1/72/6D4199786EE878501F449F26F77_489527B0_B9916.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Thu, 09 Oct 2025 01:14:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 760086\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"b9916-640af878ec880-gzip\"\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760086,"size_decoded":761102,"mime_type":"image/png","magic":"PNG image data, 1080 x 720, 8-bit/color RGB, non-interlaced","md5":"3a1726d4199786ee878501f449f26f77","sha1":"50ce77055395bec3fefdfe3ebba8c7af45576aaf","sha256":"982dbc632f069bc8da215ebf950f4575060c568f7b7c8cc9d32b9ff0c47c20b9","sha512":"07b8e1cabd46324b46250b077175f2ab551d3c66bc36a3b5315b53bed86a4841bc70ed0959baf96c73bc9948622e2f3f7eb86e728d8766721c18d8bc8b01336c","ssdeep":"12288:YUhg7nCfqvOWJjWoeHrdWOsm2gfN7exH9DSaWC5kyLsFLtW2bQfxIA/z5C2ZV2:YUwcPGW15Xs5gfN6xH9DnWC52ZC5Cx","tlshash":"bff4338900da8df6810f5ece96f3c977a4cc6d6be2bde27fc05ce31d21148954a6a306","first_seen":"2026-05-17T19:31:00.912225Z","last_seen":"2026-09-11T03:49:34.431269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4162,"timings":{"blocked":3675,"dns":0,"connect":0,"send":0,"wait":238,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/logo.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.015Z","timestamp":1789098534015,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/logo.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":810,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/tt-right.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:55.053Z","timestamp":1789098535053,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/tt-right.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/02.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.575Z","timestamp":1789098536575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/02.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:48:59 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 394028\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:48:59 GMT\r\nETag: \"6032c-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394028,"size_decoded":395045,"mime_type":"image/png","magic":"PNG image data, 525 x 369, 8-bit/color RGBA, non-interlaced","md5":"c69c1ff83d4125c3dd550cf72289b420","sha1":"022ef88c495b0b9957aa876fc31c111b939967f8","sha256":"16618c34f30c2305e69ab7d0cbaae56878c47a0be5109a817b336082d7231e52","sha512":"15057aea9fa43a34f9bd4a70cec5ee400a4d80dfffe51984391293368390a51c5f25b462d782f1edc7cc1e6f3bdc36435a1cdebb971ead8d76b72e97ffb3517c","ssdeep":"12288:v3vF2NeuWG5C7iCTAQAF7UZhxKOOuXIl6s:XF2cuGiN5Y0OJXGl","tlshash":"7f842305f98f6b37797a2d280b39c7424395e6aa275693239d35f10ab3cf2321825f84","first_seen":"2026-05-17T19:31:00.844014Z","last_seen":"2026-09-11T03:49:34.434913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3832,"timings":{"blocked":1915,"dns":1,"connect":239,"send":0,"wait":239,"receive":956,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/__local/3/12/B4/DBB1D9AD38A17A1D6DDDC704B51_D111FFC2_2CBA2.jpg","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.828Z","timestamp":1789098536828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /__local/3/12/B4/DBB1D9AD38A17A1D6DDDC704B51_D111FFC2_2CBA2.jpg HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Mon, 03 Nov 2025 08:20:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 183202\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"2cba2-642ac646df5c0-gzip\"\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183202,"size_decoded":184219,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1409x789, components 3","md5":"312b4dbb1d9ad38a17a1d6dddc704b51","sha1":"61c25771a55b6f57b40507e1c79a5ed51bcca12e","sha256":"412df08b84e561884c54c4f9d8c2f336ade8580d46dcf012a01a990d63f382d2","sha512":"8373b9fce1057f1a2d8a8fdff3fff78dc6670d639aa0815c2ed503b5b64c660bd9f73996f4902bd526337d4ed7965221cb97df8e6024a6e380de422e8fa3d504","ssdeep":"3072:DbsrxGVD9S8xslVu+FQc3Bb898Pu7suSujs1/ef0194nX5KL5xavucf:8e9lrtcRbNqsl3t3194nXYCvPf","tlshash":"6c0413636b867365cd2ed6beb3323d7a190fc7e810414a9a3c4846dbf789a25432ddd0","first_seen":"2026-05-17T19:31:00.925957Z","last_seen":"2026-09-11T03:49:34.43827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3811,"timings":{"blocked":3333,"dns":0,"connect":0,"send":0,"wait":238,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lngc.edu.cn/images/play.png","fqdn":"www.lngc.edu.cn","domain":"lngc.edu.cn","tld":"edu.cn"},"ip":{"addr":"42.247.46.130","port":443,"asn":4538,"as":"China Education and Research Network Center","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.996Z","timestamp":1789098536996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.lngc.edu.cn","organization":""},"issuer":{"commonName":"cnTrus RSA OV SSL CA 2","organization":"Zhejiang Huluwa Digital Certification Co., Ltd."},"validity":{"start":"Thu, 02 Jul 2026 00:00:00 GMT","end":"Sat, 16 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:BC:C9:A6:D6:A8:21:1F:1C:32:BA:67:1F:04:2C:22:80:E4:6F:00","sha256":"C7:F6:1F:33:E3:C0:D5:BB:22:3F:6E:25:BD:53:71:E5:B0:42:C7:96:E3:72:A7:C1:CB:18:9F:D0:31:46:4B:CB"}}},"request":{"raw":"GET /images/play.png HTTP/1.1\r\nHost: www.lngc.edu.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nServer: *********\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nX-Download-Options: noopen\r\nPermissions-Policy: geolocation=(self), microphone=()\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nContent-Security-Policy: default-src 'self' data: blob: https://agent.vsbclub.com:90 https://newagent.vsbclub.com *.conac.cn *.gov.cn *.baidu.com *.eol.cn *.qq.com *.kaipuyun.cn *.bdimg.com *.wx.qq.com *.people.com.cn *.weibo.com *.m1905.cn 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self';\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains; preload\r\nLast-Modified: Tue, 27 May 2025 06:23:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 977\r\nCache-Control: max-age=3600\r\nExpires: Fri, 11 Sep 2026 04:49:00 GMT\r\nETag: \"3d1-6361819122b00-gzip\"\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Language: zh-CN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":977,"size_decoded":1988,"mime_type":"image/png","magic":"PNG image data, 45 x 44, 8-bit/color RGBA, non-interlaced","md5":"e7c0a2dd28dd150f708548f9a3ebd07c","sha1":"04517d12f8f1214ae38669de18b226cbb2ab5ef2","sha256":"a0697e53adc4cedaad8950683ea5bd72cf62b2fa23315fdfedf7a32ec78c5525","sha512":"0be02f486cc65820cf5fb8a414cf6353783a5ad9ab69a1850bf35b62797eba9728357de3fa7e7e189694bffaa79bc482713b3f3fd60e8486917a7914bffc08bd","ssdeep":"","tlshash":"2911982a317c2042e1ae183c57559be5fe3f5754020e25ef544ca03675e88af21dd1b7","first_seen":"2026-05-17T19:31:00.883386Z","last_seen":"2026-09-11T03:49:34.442348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3887,"timings":{"blocked":3649,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/iwv840mvscz87ws4p3324p7k2i4yuh.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.527Z","timestamp":1789098538527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 13:43:56 GMT","end":"Thu, 15 Oct 2026 13:43:55 GMT"},"fingerprint":{"sha1":"49:53:B0:F1:7B:DB:D9:E6:DC:A2:FD:CA:7E:0E:6F:CA:6C:C8:CE:2A","sha256":"C1:35:27:2D:2A:BF:2E:75:F4:6E:16:4C:24:0D:89:7D:8D:C0:4F:97:7A:33:09:D9:A3:C4:DA:3B:6E:02:6A:C2"}}},"request":{"raw":"GET /uploads/iwv840mvscz87ws4p3324p7k2i4yuh.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:49:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 156427\r\nLast-Modified: Thu, 04 Nov 2021 19:43:48 GMT\r\nConnection: keep-alive\r\nETag: \"618437f4-2630b\"\r\nExpires: Sun, 11 Oct 2026 03:49:00 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156427,"size_decoded":156735,"mime_type":"image/png","magic":"PNG image data, 1000 x 47, 8-bit/color RGBA, non-interlaced","md5":"0dc662bab3fb9dd17ae6f777eae62a0d","sha1":"084f96c8fe5f280844b43235d6137626b11eabf8","sha256":"1d551f0660ef7472997f772901485f85cabf9370b1ea54334dc09ad4f08301e9","sha512":"2a3341c10473717959d703be8c56ba3fa6b5979d020e162c81ef9a02c6559e4ecf5302c14261722c37d7370d05ea95cfd20191e5e92e02c25ddbd37af23f29eb","ssdeep":"3072:lHavYLzuBktXdAkB+aAXW/xMqbirMklbd0dOmvw+swTFT9orAMI:dawLzdckBWWZQrMYbd0/w+XTpbMI","tlshash":"0be31296a119c02856fe25d2145e18394a8d2064ffb30e6ee43cf8fdc1ba5a71fa0d99","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-09-11T09:17:45.696471Z","times_seen":2368,"resource_available":false,"data":null}},"time_used":2166,"timings":{"blocked":1663,"dns":0,"connect":0,"send":0,"wait":248,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:58.613Z","timestamp":1789098538613,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fcl.xueyuxingfeng.com:6987/master/faith/sj.js","fqdn":"fcl.xueyuxingfeng.com","domain":"xueyuxingfeng.com","tld":"com"},"ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.309Z","timestamp":1789098534309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fcl.xueyuxingfeng.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 03:26:32 GMT","end":"Tue, 13 Oct 2026 03:26:31 GMT"},"fingerprint":{"sha1":"8D:4C:D8:D6:87:11:E0:3A:A0:94:F3:E3:09:D2:10:16:FA:4D:67:CE","sha256":"06:E2:CD:5A:31:25:E6:61:D6:1E:C8:27:93:A0:30:9B:A0:59:6C:FB:0E:30:87:11:FE:B5:AE:82:CF:2E:97:9C"}}},"request":{"raw":"GET /master/faith/sj.js HTTP/1.1\r\nHost: fcl.xueyuxingfeng.com:6987\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 08 Oct 2024 16:20:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67055bb0-d23\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3363,"size_decoded":1798,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"12de2458417cf5ada96ad1a853cfba81","sha1":"b8782615c9815c72070a4e785b95acd056cf397c","sha256":"2694bee860690e5659d75440ecb916c6cb8ee8310b4c0bda653b10ea2a0a0f85","sha512":"08b2e31e58dac46f0300639446090be0608bc290192bb66e6bf32f9c1c0d5b9782df890b8c9a9b4f10a4c87b80d0b2c44e785444eb8d0d86c5f20cf8b9b54fbb","ssdeep":"","tlshash":"be611f54ef8d20338e133155ae6f958c24be68577958eca7f84c64d44fa0d38852beac","first_seen":"2024-10-11T08:18:50.521405Z","last_seen":"2026-09-11T08:46:58.719393Z","times_seen":462,"resource_available":true,"data":null}},"time_used":1985,"timings":{"blocked":-1,"dns":9,"connect":225,"send":0,"wait":215,"receive":0,"ssl":1536},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/css/style.css","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.975Z","timestamp":1789098533975,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31900,"size_decoded":7756,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1254)","md5":"756d1cc79f1a7b929f421bab64bf8f04","sha1":"e25b623f0cdaffef08fc6a04e32a50ba1b069b24","sha256":"6e4aabe5bc70889d27163d89f8e63d2ffe7e89669e474869ca8db437abba6d66","sha512":"70d7bdfabb55dd39937e76ecdf34d3d3c8fd584204ca1754cbb3301403b0e58e7f8dac184b328efc1a5f9b7ddaaba7d2aab23db8fe5821104e6de2b13c612edb","ssdeep":"768:d/RnZvmPlOCXH350xv2aVtCEzQIwraFHHkUNztWzeqahETqaE4+v5V:rZvMk46D","tlshash":"52e284924b012149fa37e3e1b9b3577d933a9043f76319fcaee92954c14e19808e379b","first_seen":"2026-06-13T13:24:29.845975Z","last_seen":"2026-09-11T03:49:34.448791Z","times_seen":4,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":113,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/_sitegray/_sitegray.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.977Z","timestamp":1789098533977,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /_sitegray/_sitegray.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":297,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"e2309fffd73e167e4b371cf3c3aebe18","sha1":"d2562e6a6bc55e79aac20d97af147c0009f90c9c","sha256":"075308518911ad2710276df02c0d9f6057f7a6d16b2dd7df9901c1fcd791907f","sha512":"46662e929cd41af11aff50785620251001823eb6decfafa30725dbc7eba9f6dd8235a2c32205ba88a876bd7a283c20ae3bc9e346a58c90007900ce68f6e21179","ssdeep":"","tlshash":"8580000808ab3abb0008802c3c2c0af3888fc2e308823c0ce02a000c0e2c300c088c3b","first_seen":"2023-09-17T09:21:02Z","last_seen":"2026-09-11T03:49:34.449646Z","times_seen":69,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/js/slick.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.994Z","timestamp":1789098533994,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/slick.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":83762,"size_decoded":17615,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"95383e43db2d2e76e5b5b347065524fd","sha1":"bf244c035bae9c954ac253c1ffe68152c3e42dd4","sha256":"35d7aacb9c584987560bb33faa8b698bfce9d5886ac30103e7ac30401f353e68","sha512":"11fed6f2b2cb03f308e87bc5df4efad74a5bb7fef1cd035b97b428f70629797bf559461c3f0f8fd6f9e7f7fa3c5d733f77eee5407f87d9aa7de4cb3f0e9ee6d4","ssdeep":"1536:xrnrWutGI2R7H+e4yMibroAOGJATcY4sWlg9:xrnrlGI2R7H+e4yMibroAXJATb9","tlshash":"fb83ee0b55f6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","first_seen":"2026-06-13T13:24:29.85071Z","last_seen":"2026-09-11T03:49:34.450576Z","times_seen":4,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":140,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/fix06.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.009Z","timestamp":1789098534009,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/fix06.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/fix06.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":661,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/title.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:54.017Z","timestamp":1789098534017,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/title.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/title.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":1020,"timings":{"blocked":883,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/images/03.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.436Z","timestamp":1789098536436,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/03.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/images/03.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/__local/3/A1/72/6D4199786EE878501F449F26F77_489527B0_B9916.png","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:56.446Z","timestamp":1789098536446,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__local/3/A1/72/6D4199786EE878501F449F26F77_489527B0_B9916.png HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:56 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: https://www.lngc.edu.cn/__local/3/A1/72/6D4199786EE878501F449F26F77_489527B0_B9916.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":373,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"lqcx.dgyuehuiwan.com/system/resource/js/base64.js","fqdn":"lqcx.dgyuehuiwan.com","domain":"dgyuehuiwan.com","tld":"com"},"ip":{"addr":"104.206.200.122","port":80,"asn":62904,"as":"AS62904","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://lqcx.dgyuehuiwan.com/","date":"2026-09-11T03:48:53.985Z","timestamp":1789098533985,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /system/resource/js/base64.js HTTP/1.1\r\nHost: lqcx.dgyuehuiwan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://lqcx.dgyuehuiwan.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 11 Sep 2026 03:48:54 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4611,"size_decoded":1704,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"52f2562d752d6046317d7ece470f5abb","sha1":"b47c4b07e8b35df1eeb47c67382a2db1ebe3090a","sha256":"c81ca27c4c7764046a98a891cfb2d12c410df892fa0ab963689fe60473806c99","sha512":"ec06226350fef0a16e1b7961d19e2269779860319148cba2caf02d87f557c5e54f8fbb56010546600d710a63cc90fa28b13c1984d08411cfda7c42d337a3ac06","ssdeep":"96:IalB9hzRtYoctsRCbLcztLjS0zNq29eWQ/z:xLv1ctuCbIztHS0zNxeWQ/z","tlshash":"d091ee062aaa74b40adbb3350fdf208865596427020ddc94bd1d9aa04f42bb05ffdff9","first_seen":"2023-03-08T07:27:53Z","last_seen":"2026-09-11T03:49:34.451277Z","times_seen":406,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"lqcx.dgyuehuiwan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"lqcx.dgyuehuiwan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}