{"report_id":"b82bb98d-c9a7-4080-874b-0003ca2de4d3","version":0,"status":"done","tags":[],"date":"2026-07-15T05:50:37Z","url":{"schema":"https","addr":"dy-zhifeiji.com.cn/","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.164.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"title":"纸飞机中文版官网 | 正版电脑PC客户端免费下载","dom":{"size":33205,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e67201e18ec013580b67eea229579498","sha1":"d18f112489b5cdc6c3c1e11c2105ccd29c3889e6","sha256":"0fc8c975c01788db770e8ae311edf1ee7ed468394ef2d31be2b68875275d1cf5","sha512":"44fe5ec231477ac698f2333d7f7e1d5f5da03b21080f2e2dfd36f2b381a1933df1a7ec80ed160c53d12f8a6eedc6d36c9864fb5f2b061ed1ffce19295521c9b0","ssdeep":"384:1gQxGQNTDhKjEIKJMFZPlmmQWFAnTsY+xxjXqcCFPvY:1gQxGQNTD8jEIKJMFZ5QWrfxxjXqxlY","tlshash":"efe2619b26f314673853e0e56ba5274a6ba4d403c00ace687fac039c8fc9d859de774d","dom_hash":"domhashf9124692b215573ad1b153c9bc378d9d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"172.67.164.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T05:50:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dy-zhifeiji.com.cn","ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-15T05:50:37.886034Z","last_seen":"2026-07-15T05:50:37.886034Z","alert_count":24,"request_count":8,"received_data":302164,"sent_data":4093,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/logo.png","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.541Z","timestamp":1784094609541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 10:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e5505-2509\"\r\nexpires: Fri, 14 Aug 2026 05:50:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emXF6x7tB0kCBw%2FsLMb16xNPs%2FV%2FBREqzPZtY1x7Cp54TW5BZqe0FUFJzHAZF%2BDQT8DCjJhZv9hgK0oo2u4%2BeoJJk4dLAJ4JwTPDxppR%2BMu64dsJD%2Bu8qQr2A5TeiWdnSP0bSXM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b67ceda91d32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9481,"size_decoded":10301,"mime_type":"image/png","magic":"PNG image data, 236 x 236, 8-bit/color RGBA, non-interlaced","md5":"1621329dd23288d41124901ae08e2a28","sha1":"b0f835b0e46dfc70a1005654139c9ef5415551fe","sha256":"600d876466c21d04fef5d2052cafc105e19995d59d410b7dfa821c82a07e9f00","sha512":"c4bf01fc1d31c99a7275ff88037e9a7b33daa9f342700043ddfe20e58fa4531543ae44d8ea8b74cd8e39ee462424d42c3282b8e63eab1dadc25c543a3043f305","ssdeep":"192:ao9EsyiMSrUfplZjPQSpzql8jBi6M0UKzoQ23ksT1ARhBiKrCr0OYD:81ifryTpYxE2jQZCHYD","tlshash":"9412af43b926c3fb98e40a37054c73099afe72379293049164a377a197d9031a7fa63e","first_seen":"2025-10-23T08:26:50.929613Z","last_seen":"2026-07-15T09:30:02.267776Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/diannaoduantu.png","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.543Z","timestamp":1784094609543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/diannaoduantu.png HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 10:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e5505-2e526\"\r\nexpires: Fri, 14 Aug 2026 05:50:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xulX8WWaluS2s5TL9EPlpbXGDXzOp9tehUlesP%2FzTo4irD3xSSKWiEhLZhUk6YyMSJ9L76w0eAeUzIPSokLmqZ8SoRRBM7U4emtgxUSO56YqOTli9%2Bs4a%2FGXn%2BA%2BKKIutRpdR8o%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b67ceda91e32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189734,"size_decoded":190177,"mime_type":"image/png","magic":"PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced","md5":"40d4266e5aadc87cceec1ab420dc2692","sha1":"266c56990a106b6e9efb0f9ef2a1a752aa6fa0fc","sha256":"3a1d4890b3e91a01c20c65b75f1ae028e3c445cad1fd2d249dd0868876dfe4b4","sha512":"7de32defdd87034f29930a7a32915100c2a109a80c79eed4c0a5f3127d1101fe0bf59b41cb4c5807f6fea29a7721ebe74c55a8a4942c4ef67edc40b860f46277","ssdeep":"3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ","tlshash":"ce04222d40b240c7bd1bea21a1f82f73233836206aadfb73b43e9d429cb76554d1156b","first_seen":"2023-08-06T11:12:12Z","last_seen":"2026-07-15T09:30:02.268249Z","times_seen":1320,"resource_available":false,"data":null}},"time_used":1885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":777,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/pc.svg","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.545Z","timestamp":1784094609545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/pc.svg HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkKc0%2BPcYQu8ucTwXHRT7VRasQuEH%2BQla2rmnOYYXYVwCeEjlgqOdJCplRIjUjqRMt5BzreUGfW8B%2FYPc8Zpk7y5KQsm28g4CRyizLM0iJHie4DbYuuRkX55cPLG8PlNmtrbmQw%3D\"}]}\r\nlast-modified: Fri, 26 Jun 2026 10:31:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a3e5505-27c\"\r\ncf-ray: a1b67ceda91f32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2808fd55b5aa41fa27b49699fcc6501b","sha1":"82ed78264742822da2b3ad4c10813565ce324fad","sha256":"427e81d293e6bbe6832721d43cb4bdb3bd60eb41cc7951a7f27d65f6b06b8d22","sha512":"9fe6ace4457a1af4fdff6cd0b65dc01277a6e7951ae6b4c47ec2e838d5bdd38e4ff37b9b5c6955a1a9e51b7a55096f6281e89bc88801ca33e7ba893fc7297a52","ssdeep":"","tlshash":"44f0dd0cc399ac28214b43c496ba1be1214d10dfc4c2a3bed8825470d17edbd3e9177d","first_seen":"2023-10-27T01:28:36Z","last_seen":"2026-07-15T09:30:02.269331Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/1.png","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.546Z","timestamp":1784094609546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/1.png HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 10:31:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e5503-2c4f\"\r\nexpires: Fri, 14 Aug 2026 05:50:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQr301KWGLvC%2BwqGZh2CHMBYTTftRa1Kxw7%2BLUMHvUEipOy0rs9kMf6TFMoIHOs0B2IFqtOpr%2B3WNZ0is%2BcI75ub6Ed%2F%2BN4KMgqLO%2F0zVNQZrAade4Nsd9TJ%2F3MTj0SjiK8NQzk%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b67ceda92032fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11343,"size_decoded":12165,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4e06d87c860ba8e8a804350f42632217","sha1":"31d3f89ae95d6f25660020b21e49114aaecfdd59","sha256":"6b081cb199e67a43ddcd7ddac0b528c93cc72bb82641937368a41b0aece43125","sha512":"c28516686e07c341dba58b28c8185ac31ff479d7b4f8d081cb50b395c6678e353b8d0d00e3b21185dbcb6484f81a354170d403b8b6f6e7efe8d73017d1d681ed","ssdeep":"192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru","tlshash":"fc32ceebb95170dc581b208b3f005099cc5df6500d2e2e9fb9fec78910238a9a580bab","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-07-15T09:30:02.265602Z","times_seen":1202,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/4.png","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.549Z","timestamp":1784094609549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/4.png HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 10:31:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e5503-4637\"\r\nexpires: Fri, 14 Aug 2026 05:50:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hOcTvJvOW8%2BAGGgsR0a3wyghpcvlpc9HHLxEK%2BXM3YCFBGHw0GJtk6IQY%2BvvYegQUFlA6yhA%2B8AYJyGj0MdLg58Y%2BcFY%2BHjmTm4TAbHp6wEIiem1SEH%2BW1psK3IKeB3lvNwnEo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b67ceda92132fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17975,"size_decoded":18795,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"1d581b72d19bc828654229a0773a5300","sha1":"ff517c8bb4b37351ff3dd72f7ec66fc584e90d5c","sha256":"d2b3858e94ed122782de9028f668334438649e46e5d2c6d761e3359c8e3de200","sha512":"1b98b05c5f720c34d470af9606013e8dfef2c88225ab39dde906e4bec48f84851bfa9c68bd99aebafefac35c8f99861a58a40deb5c26cb74a5a19374fe7aedef","ssdeep":"384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc","tlshash":"8b82e0fa8aad835fa9b82500f17219d07d8277389cdc7d6dc07818e0bb245963b1f712","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-07-15T09:30:02.275553Z","times_seen":1196,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/img/3.png","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:09.550Z","timestamp":1784094609550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /img/3.png HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Jun 2026 10:31:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3e5503-4051\"\r\nexpires: Fri, 14 Aug 2026 05:50:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2i0dR2lsakHDHR82eKdTYc5NqiWfMV8OBr5W2DUtQQgePEAbWIpjqMR9%2FwvjpMAtjd8cUDwYRIC67wNx%2BBzyo7BzGpdN4yC0YlhJyUzwPSoZRfV4dnMs9yd3BNUkT23ONgvVvE%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1b67ceda92232fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16465,"size_decoded":17270,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"77ffe8b3dff795ea0734bf4b35a94357","sha1":"2d545ffb0877993dd227d528638a336cd3b9e32c","sha256":"ad37907e335e7c5d2692b682401f4520753ab539fadedf74962c6a004b3a179f","sha512":"fb4692716badcb1fce73addb8ecbd16c7158a8d0618b3bf3b1833661a3813d48500f8c96972c9cbc2f5ee9dbec1ce6f0450a6445a3ca9635fe2b3ada9a50b206","ssdeep":"384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm","tlshash":"5f72d07623938eb70eb9680d3f58eba84f17c540be5897a43176950c1532fe5ac4893e","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-07-15T09:30:02.266142Z","times_seen":1194,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/favicon.ico","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dy-zhifeiji.com.cn/","date":"2026-07-15T05:50:10.114Z","timestamp":1784094610114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dy-zhifeiji.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:11 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyAwC%2Fqtdcrk9%2BvmcBrFRyRc8Jf2vt%2FiGnQM9jUDaXNi%2B8iAO3ccpoupmqHLm7atmgx%2FQbFUorsGhzhhqj3s%2FaQ8dvWpPO0j15KY8nOZIiabU5cRwBqmYI4BpqKbzNw1Hy5mol8%3D\"}]}\r\nlast-modified: Fri, 26 Jun 2026 11:14:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a3e5f0d-423e\"\r\ncf-ray: a1b67cf1397732fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":4627,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"b92f3e80ae38629f3e51eb77fea3aec2","sha1":"fb4434b44226580f733f0f4a779ccabe16187319","sha256":"37563d81a38c7ccca0e7a8eca014894a31ae9bf2c9a3e5e73c876dcf25ecb2d6","sha512":"6ff34e6bea7fd78182cab6fc43c5700921f015520c00f5c43178d4d614341957d7ffa7c3453900ec7d9da924ba9f7ff70740dc1d2cac0ad36e59a64b8b0370e3","ssdeep":"96:jVE9uedUv8InswlqnjKXmZbM56pOwulp3FAe/MkJQlTnLvRjO:jVMdQnswojg56pOd3N/MKwTLv0","tlshash":"0b722ed6b205904df59355b00352de74a22baed7bf48681132d5be0f55378e2eb43d31","first_seen":"2025-10-29T08:19:46.900161Z","last_seen":"2026-07-15T09:30:02.267238Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1026,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dy-zhifeiji.com.cn/","fqdn":"dy-zhifeiji.com.cn","domain":"dy-zhifeiji.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.50.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T05:50:08.230Z","timestamp":1784094608230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dy-zhifeiji.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 10:19:25 GMT","end":"Thu, 24 Sep 2026 11:17:51 GMT"},"fingerprint":{"sha1":"1A:74:C8:70:1E:E6:D0:60:70:BE:F9:FD:8B:0B:63:E9:83:7F:08:EE","sha256":"D5:88:D2:7C:61:34:14:CE:3D:52:0B:DC:EF:D2:E1:EC:9E:3B:9A:D2:B9:EC:B5:06:EB:32:DC:A1:AB:A0:83:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dy-zhifeiji.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 11:15:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQt%2FfJQWNEqlhX1ixk1%2BTRTGwW0hf62ugGI0nfmx2n%2FNpSBSKD%2BVGjL3PZ6u9Z0mmpGgsFoNRnwbMn0pRTRv99bd7UjttajGv2GK4Gu9xPcLlL1Sa2itBc%2F%2BGKr8MSYVG0iF9ic%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1b67ce5f89c32fa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33474,"size_decoded":9132,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"214f93b3b0d2151e627e8043aa3aa4da","sha1":"cffa45defcc864b4762412bf6baaab1a0805f3e5","sha256":"62346fd0192ef313690e1a381f28460163f88d94e4447ad011f5516fc496f419","sha512":"89183064fc3addad0cef08069d737cb84ce98b4b3d377701bb577cb32aad5c2cd677f671b126a1b58b2a211a1588a642b877310b581b3b1d32040bd4d868e7d4","ssdeep":"384:hgVxGQNTDhKjEIKJMFZPlmmQWFAnTsY+xxjXqcCFPvP:hgVxGQNTD8jEIKJMFZ5QWrfxxjXqxlP","tlshash":"5be2619b26f314673853e0e56ba5274a6ba4d403c00ace687fac039c8fc9d859de774d","first_seen":"2026-07-15T05:50:41.638924Z","last_seen":"2026-07-15T05:55:47.257396Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1061,"timings":{"blocked":-1,"dns":67,"connect":14,"send":0,"wait":979,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-15","alert":"Phishing Block","trigger":"dy-zhifeiji.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"dy-zhifeiji.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}