{"report_id":"bfa798e4-0b70-4995-9629-42d53c47805b","version":6,"status":"done","tags":[],"date":"2026-05-17T03:10:22Z","url":{"schema":"http","addr":"tkktokshop.top/","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"14.128.45.189","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"tkktokshop.top/#/index","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"title":"TikTok-Wholesale","dom":{"size":178053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43092)","md5":"502a57fd2a815a4f6ddc7b6268effcbe","sha1":"28771b45f6d2f185d8d17db11366bc06586b884b","sha256":"7f2c2768d4eb2b6697f1e2527c4c847b2385905d02a44c397c460fb698f0b5d9","sha512":"0e470289a504f9bb5af65ac8f9dff0437e9a392c0e5e6658d04abb3f7c06700764fa30557098dda2a6394a0edd7bfe8c8093798174a52292217b267178e59aba","ssdeep":"1536:Y/U0MaUKoRpjqYu+4MR69EtVGBlxkv3lD/ClA1KZ0xPIlUmCdzedxkQTiYnOjDdp:CMa3Bh2DcrxZh22KxdSp8","tlshash":"af0452b1ca6a223b42274dd870705b4fb6e3c31dde97460167fc97895febca4ea04489","dom_hash":"domhashda3a237e80aed1a5a825650de5606687","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tkktokshop.top/","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"14.128.45.189","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T03:10:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-17T03:09:50Z","timestamp":1778987390,"ip_dst":{"addr":"Client IP","port":43776,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"14.128.45.190","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 1","source":"{\"timestamp\":\"2026-05-17T03:09:50.975113+0000\",\"flow_id\":475189569557950,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"14.128.45.190\",\"src_port\":443,\"dest_ip\":\"172.18.0.3\",\"dest_port\":43776,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400000,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 1\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-05-17T03:09:50.693694+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2026-05-13T10:08:47.683191Z","alert_count":0,"request_count":63,"received_data":6093743,"sent_data":28719,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"tkktokshop.top","ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-05-17T03:10:32.348398Z","last_seen":"2026-05-17T03:10:32.348398Z","alert_count":570,"request_count":114,"received_data":7048349,"sent_data":48888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imgtest1.s3.amazonaws.com","ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2019-08-25T08:51:32Z","last_seen":"2026-05-10T11:08:59.673587Z","alert_count":0,"request_count":42,"received_data":5575599,"sent_data":19165,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tkktokshop.top/js/app.e69ee347.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d002ffed73788e962bc2351eb9b816ea","sha1":"3b6e3f48d4a4d25c1fc2b70302b5ce089095d942","sha256":"e0d3193002c1e2457329a03a3978e813eed1530fb757982e283d3ad735b76439","sha512":"8120d0af2833e137758d36167ebd13d27cda384d7df2d170fab4a5514a145efacdecf74ad14a51acd98accba7129e181189f7010e1106b6dcbc649d95033277f","ssdeep":"24576:QdGDd8ObXh5yMU9W/P3CUtLzT9HxfUZO23ZkxK5Q+4n69cEdswB9LRbWxQ7BAi9n:aGDd8ObXh5yMU9gPFtD9H9aTpFC+AXet","tlshash":"b9558def67da77fc08545646a04f7975219c1cbafb96f0e008ecf61922e9e408213f69","size":1381418,"data":"","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.468165Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/vendors~app.e68c9730.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6510b7d09aac765ef82ceb7e64b9a90","sha1":"cc16a02be14e3bbc9c33c90ec80659d99ab5aef5","sha256":"e5955e28aa8d1e86d2bd50f5f8e986cd26203b12936823cd1deb8497c68f059d","sha512":"475bbf460023fdf98abe1ee1a1b178d3eafb6da5c57340172dc796558abe5073861bf4e8f57c7c53961fe69f03b16184c75771c9b750ebd5cab2b8b472ad78a8","ssdeep":"49152:wYLFNhhNKhiIdnrkBGbJUV/8RaWU4nCNXdwKDhWBpZ8Ket+1VEQxv:BLv/4EBGFUVPWvAX+Kgpj2+M4v","tlshash":"b7f5c35c365af340915ad0e7e43b3c49d26ae189a40b00d07f7187f31eb574ae7aee26","size":3556889,"data":"","first_seen":"2024-05-04T04:46:03Z","last_seen":"2026-07-19T16:24:13.467181Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-dcbc024c.b4863f7d.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0691e73ae6889f051afc50833894a9","sha1":"9153602f9567d94ae3ee172cdfe5a15a6df7514f","sha256":"b7adc11515247bbe6a3109344b5c9f3b96b2ed1f3f98a402ff93a2c45c54d7a8","sha512":"722f1423b6347db21b697d2dfbeab3a11ab890c43e01cc274b16afc1112a7b841356ddce56f53dc660a15d932f686fd335bc7785f2c4ae6c5dfcc85529dc3e7f","ssdeep":"384:LgsnVXOdCkJoHcsJ0UBlDKalA4NMrh+/QeOYaWvzghY/Jz:VedtsJdBlDCU/eY+Y/t","tlshash":"90c22a47a4d1a87d8b937159341f2198e6762fc5d045cca6b63cd8f9e2bae30231b72c","size":26857,"data":"","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.452522Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-ff2fdb80.373c9e7c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19d0c0fc8289187afd59d055a800fce","sha1":"e9fb79effe14f4f033cacffad374a42a761f4b6e","sha256":"a0cf1a174a89919d44ec675764cd4966143ec595bd60ea7cea0a686a21454db9","sha512":"475bf5673f9edb32cff067713c636e1c287f36e9faf03d6f870ec97734d10693880e71459cf2b918e39c2479eb8cbf2233c89eacaebbf1244daa41fd334ce9cf","ssdeep":"192:yZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGCH:5e7FJsHRpCQJRX+2pDHmmvPQ","tlshash":"4c5294e6c470a4bd895a81726055e1e0fb653a2cd102514efb7cec9a72ed428333e77e","size":13681,"data":"","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.439292Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/cc9f0c02-1a92-4528-8753-c155478fe852.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/cc9f0c02-1a92-4528-8753-c155478fe852.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qagbd1PfezFbF9d0E9kbCufJwOM8CIEViiRhBy9r9r9r4Pv/V7BSYrVbLaf3RirAf6wdamhrYDc=\r\nx-amz-request-id: Y8MCPTCD0SMFSRTT\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:52 GMT\r\nETag: \"d858d55afc3e656ee3bfdf0a377589f5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 237188\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":237188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"d858d55afc3e656ee3bfdf0a377589f5","sha1":"4aad0028082baab839dcf77b15dbb1c1f8cd9cba","sha256":"d642984a117d89349a1406a829df5859a6bcb1c7e55241b7a647bb238b2be1f3","sha512":"9a866f4977ef98b217035df2cf4ca4383f76dfe6a0dd737d85eaabd162224ec671314e5daee299db0eb69e5878e39c2a968bad7c87afe639cd5ac9d4a88113d2","ssdeep":"6144:uS3CPdNMUSSNyTgJ8tQrxaym12NLF8acZXGlexMJnvglDJdc+:eNMUmsJ8yr0gxF8xl0eRDnc+","tlshash":"533423ce7254507401493ab0439c4feae7d2abc34a4863f9b85a4681edc996de7dcb33","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.490339Z","times_seen":6929,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":120,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-f43bced2.c70dd4a7.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-f43bced2.c70dd4a7.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 111\r\netag: W/\"111-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6fa0ecf4147c8ce0222c50c699e3807a","sha1":"a77f07547a33f9b6ec67e6eed37629f508f97a6b","sha256":"6943a6d74dcebdb81ed9b48152a94e537946bd452b87590c4179c966722f5719","sha512":"8cc93fbb80c2bbce59ed5c2bf12fbe7ca0c49da27fa32ef1bbaafbf84aace700d4e60931ad95010ae4f7a5405b3e6f475e9ebf8431beb768ddf5d95ac4efb1ef","ssdeep":"","tlshash":"66b0123a734b04fc8c2ff0203f5988b87ec13322e11924035f9c8024451e7027c30210","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.445601Z","times_seen":8474,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-5c861bdc.fa565357.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-5c861bdc.fa565357.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"50550-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50550,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50478), with no line terminators","md5":"bd873906e4da95b9cfb2cb4a86456337","sha1":"b40d370899d89403f3db0677282ae50e6f216445","sha256":"4272623d725fb57c47245baa4d9dced4dce380f46791cbdfd2b642ba30bb336f","sha512":"30e1d183e12e878b41e93512b73e767699989846c6d980ac242f3107e08d13804b527bf43889ce0bc8942c7a69a3973a550272e540c5f46dceedd5432cefe61c","ssdeep":"768:lXM3vPDo6ewbH/7wkDOjo4qZjHCox1nFGITjRq+51:NWb7TQwb11oII+f","tlshash":"f23309535169b46e5f7752a2301b20a1a2a427e5640898deb27ccdf973dcc242b0ff7e","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.523544Z","times_seen":276,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"53dd6ac5a79d871d89b020fb37444627","sha1":"271f2a1815dca38dc42d7fe047fb49c1e1b7edbd","sha256":"1e39a4acd929650c609a0572f365cf56c43d3f63abfbbe7551377103b45d68ad","sha512":"7920d2ceecee00879e6d1b77e5f3e18e574c8ec199716c7265b656fb8108d3655402b7883180b1fe19d99ccbb206906c8f997e03d5367db7ad79daeda43f6e4e","ssdeep":"","tlshash":"c811cc061ea8d454098877828cceb5c4d27ca61b5de68e0ad8adde0c6a34f7c242d312","first_seen":"2024-09-28T07:38:09.675509Z","last_seen":"2026-06-14T13:39:32.470683Z","times_seen":508,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/acc8fc49-f110-45dc-ad47-ed783751d459.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:57.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/acc8fc49-f110-45dc-ad47-ed783751d459.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OnFkESPpN3ZDVDHZB+LfBzRKIMQIpzW9OeqTH89KiZOzctM/LepErUZMbpVfV6LPwl/nf1O5E5E=\r\nx-amz-request-id: ZE59CWGX6HAX3M9G\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:42 GMT\r\nETag: \"c634a23e1cf05e83125aa10432132296\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 53448\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53448,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x964, components 3","md5":"c634a23e1cf05e83125aa10432132296","sha1":"d852a10bd34b690c8e498ee73ae2d6c5faae1732","sha256":"5b09946f350ed1fd218a76b5910d839c13519d8e17a1db3e796de2073f40b98b","sha512":"44f4460f3699bf4cec57d45ab78de259706067c0574959c390412dda8723e23ce0c53d9bc273bbef08374e4f3951ad12a07df0ce7a7b81170fdc9b2f41b3584a","ssdeep":"768:13UWmYl3EprZ7Du4TLP9nMxJPbV5Oi5+MlzmD1lqktAYyjSy0PukXXM:RUu0rvXFMxVbVtlzYlIjFeDnM","tlshash":"8a33f2dd6b7180f5c62cccb79fd13ba76a1282bf52b50caf47a38e119184715384f199","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-08T23:25:03.408106Z","times_seen":7218,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/304ce03b-5dd7-4e7f-a074-7d7c71886fb0.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/304ce03b-5dd7-4e7f-a074-7d7c71886fb0.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UWjFU9NCwbqBYdYNgKEQVJxtFNhZiNPm8peQSvwxNRJh3zF9H2BwGPsj61lvDUK7hBXbb/s6xkQ=\r\nx-amz-request-id: Y8M19Z1HQ0HQGG5C\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:11 GMT\r\nETag: \"a3fdf184d72fcd6264f3e56d08724060\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 55808\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":55808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 594x745, components 3","md5":"a3fdf184d72fcd6264f3e56d08724060","sha1":"44b803a692f1d5a4ceaa59481d693e1af0493826","sha256":"804ba7da443132d09e928652b04212b8481c8da88e893fe4b7a76a4771e9deaa","sha512":"aa6d53262762a2593f8116f30c265ceda536a839a0bbe103d2c74e0d2e5d7377b4b57e49127a97e371faa4edfcdd114bf615536dca4545d1ca9ee03cfb8e05ed","ssdeep":"1536:8ief0738AoLCzSNcSHs5PFajgsARfcA/U/qLFa5R:zgYzSXoPF0gsARfcaLyR","tlshash":"1543f21eb368dec9c3f68dcc483ead85788cf4392bd30b19558316a3d09e9ea8579161","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.476667Z","times_seen":6865,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/dc0af8d7-d6fd-4d17-b74c-2ed7629fdb8c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/dc0af8d7-d6fd-4d17-b74c-2ed7629fdb8c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: X+OToYlhkQkHwJI8lh8Y5ZlR9NEOwpXr292qbAmHAyR85zno7gm/0LPg7jGIkWpl1HYq762Q07qM8OCyqAz/epQ67bv332FY\r\nx-amz-request-id: Y8M2YDNDBPYAR7QG\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:24 GMT\r\nETag: \"ceb0053e4ead213a14ea00bb6fd83059\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 250989\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":250989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1481x1500, components 3","md5":"ceb0053e4ead213a14ea00bb6fd83059","sha1":"b8ef9c555d7d6b02ef1f4347d740e8d35f37b668","sha256":"526095a10d5399932f459a0f773a198e1f0284bad0ac07b3ea3a545ea9bc2ae4","sha512":"b7c084172560e2b54e8060dbc2e52f1c32f422e2ad89586666606ebf9a869900e6208847d5a32b1557ec33221519cd50202a0b04f312b1f29977a9b550f3dc43","ssdeep":"6144:n4rHhONC9vYZajSJGqLv1RSej6oHcieiO1cH:n4rQCpYghqLvCej6o8TigcH","tlshash":"f53413bffd159994ec0409383a2062e48b0c9fb91f66938595d8bbb42a14cf7dcf0267","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.413905Z","times_seen":6692,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":119,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-07-23T06:19:40.755081Z","times_seen":6199,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TwKoewiI9g290JlWuB5WTJ8j1XTNjqR41NrmH3vqNXxh1Xvp1VrEPNfzXB3GatZICYehw6eTgi1ql+AxO2/5qFTeaUTsltWY\r\nx-amz-request-id: X234N1JRJ4ZXNT5C\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"882acb8a590986400f716b14ce87dbd7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27557\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27557,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.783843Z","times_seen":10058,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":793,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eWo+NS1OfWjTALfs+pYyBiFg7oraw+wqtFLR7PCYn/06vcO2jvVh55tl2Hwz2qo9+FIRL6PJqh7Ly5tL7TcgZ4C/Es2ulkYp\r\nx-amz-request-id: X238SYG1KS371JYY\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"3fb702f913ff64c272d67742c3fade6d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28164\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-23T06:19:40.793839Z","times_seen":9905,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":854,"dns":0,"connect":0,"send":0,"wait":121,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NerneANZpt32RhD7u86W06Zo0L8M0dMdzpw1FEv8N52G3ZPjF+oNi9MxbvReq+pksTP0wQi5Cs3UvN80mz1lAFMTqZiSvTOZ\r\nx-amz-request-id: X23E5ZMVDY49MJRV\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"1b8714109ac1c300a6848b18f4b10531\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27057\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.831152Z","times_seen":9716,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":886,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: c7onMeCFAGXJl2BQXfUALPe98yV9WnIgWD0lunEONXdcNB3f3LmsgkFY7QodXi7uApDqzRyG8mc=\r\nx-amz-request-id: ZE5114K2QTVM4XG0\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:38 GMT\r\nETag: \"d08309c8a906abec10902eb9239abe8c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96181\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1339x726, components 3","md5":"d08309c8a906abec10902eb9239abe8c","sha1":"aeda5384b198a7af5ef2e0b674dee8b5c8e9cd19","sha256":"56c0b42a383410b485eea554fc8466494ff737bb0ba87173a3d96078572e767c","sha512":"4a5eed14cffc98e81ee7c0c244ecd0b818e296d0f91384b50f84f6eaba25c4e0d9377123d66cf882eac33ff1cba8abe1666fc2b9be26d2d36bb5f45176b44f66","ssdeep":"1536:8187L7QI5Bqn/gHbTCESOzFpIqtIhH5v9TKWs73I4m7dR34F9ncu:j7QISInlppItH5lu3Gx1WCu","tlshash":"229312964b888a58c07c2a7e84ce130fb9b1ff14b511724b9bc116b87fb74da98ddc51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.954645Z","times_seen":2463,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":609,"dns":0,"connect":0,"send":0,"wait":114,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/e2693638-a8e8-40b8-b503-46fd93510048.png","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-22/e2693638-a8e8-40b8-b503-46fd93510048.png HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: orC1lF6XlV8CmiMUGCQ06XSn0XjmuCzIwnuUcYzjX7oR1t88o2dZ5zTBJ880r2f1+E7hkdHeO+Q=\r\nx-amz-request-id: JPZVXPNYQGKJ81XV\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:40 GMT\r\nETag: \"40fb52c897d51c6334e0ee6e3f8e8032\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 14775\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 521, 8-bit/color RGB, non-interlaced","md5":"40fb52c897d51c6334e0ee6e3f8e8032","sha1":"955b62341fbcad6215f3c0a2378e3969110b4b3e","sha256":"d7811c821cb49a4c1d8222afd5bde67e8d10af95e8d8a40f90e2320cdc82c551","sha512":"b9285da8e31609503fb716b8cbe12bb873e5eb7826c65f1d7ba603fdac0783edb4ae1751b049026028578aa83ba20e227de5e56e19cd2bb55ed27312ce479c84","ssdeep":"384:h5PD9aaDTfXQXE/+HjUbM+paOUiHPRlUgnkBd7k:h5P8aDT4XXMMkaOU2RlUskX4","tlshash":"5662372e08431aaa30935ef59e801171b97171ddb7d52394b14adf3723d5a73fab8830","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.858417Z","times_seen":2043,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/208bfce2-9f5e-4564-9ff0-3f42b091c6e1.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/208bfce2-9f5e-4564-9ff0-3f42b091c6e1.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: euBY193FaxJeznUe9RuiMMUF/X3HUCpgi5GBB2ra6Inqfvtkc4YHjklO1l3OyeM6nO7wAE3cCE0=\r\nx-amz-request-id: Y8M79QWBFZCA4XVH\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"1994307f8b89af5cfce1809d993ccd77\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 70775\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70775,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1419x1500, components 3","md5":"1994307f8b89af5cfce1809d993ccd77","sha1":"18a1e5b438175e9c250289af987baf9737f6eef3","sha256":"6fcf1c0fd9d63f09ab28bb88303bf4a07948cf20d7f2ada3b98d61b1c72c58b0","sha512":"44130d3baa426c9c78b487f7afc1be7a2aadcead85221802a975bcafa48cf828ea9269b51fdcd1c738e0a7fc03138f3e25317668713641cd8e24bae3648ecdb4","ssdeep":"1536:T+d12/duTA94befwkF/rN77EpdChj5oBzirrX6cRg3AF0:yfLTAueIkF/rN0pdCYRerqcRg3Aa","tlshash":"f76302f370c11441cc64d5b2b68d32b423769356fc2fd30c469e7b5b628983566e3ca9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.531718Z","times_seen":7209,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-080bb2e0.29e11e35.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-080bb2e0.29e11e35.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"17006-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17006,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17002), with no line terminators","md5":"ca29c598f31fefe608dd8496bd32c91c","sha1":"49a6f9588b96e91fd99cf9c23748bc233216cf2a","sha256":"1ebf668e9bfe8de87c939eefdf2d16f9731bae19ec883aa358afd82cca55d911","sha512":"370c59b7c8b42b0be014d53a9b68c6fef1e6b6e80f7dae443c483db540debd05da70acb53cc094a672ba4a8ac98a9bef38cd793122fcf51f74fb3bcf902625ae","ssdeep":"384:nzdfWXO0okHyvDQ0RTCw6IJGzg0E5EQyqUUhDBusDJB7WmjX:nzdWXO0X0RTCwPJGzg0wEQyqUUhDBusR","tlshash":"4d72f947e098bc4d9f6b92a2304f30e1b011a529786659ebf6adcdf7238cd103a17779","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.532052Z","times_seen":290,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/app.7301f093.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:51.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/app.7301f093.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:51 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"234708-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"75b327104fe473b0c7bd1a2b222241f0","sha1":"ff8a1c2531d27a1d43b7418847c98ad9b9a21dc9","sha256":"879013ca3780735ed0a9becec10273c93435664b4bce43e9332c2981a76c1a41","sha512":"46cc4aeea89754e49928caff608bf2b25cf85165a1cc10b301cf35682078c3239028b718bfe12b92b03e8eb7e318a9d56f577050264d19ac506497648e93f227","ssdeep":"1536:FgqId3828Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOd:KFFJWTPL4Q+05q2pe","tlshash":"9c34b510db17217b222be6ad75c0fa886f18c322d8725b7bfd95741ccae64891163e1f","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-07-19T16:24:13.415771Z","times_seen":993,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/index!download-url.action?lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b37252614b5f5bdef892843c318b4485","sha1":"ac5f104553d20193c06e7fce2d9ac48646969cd3","sha256":"a89a72b8105e8895b59307a6d311ff2970f9bda7f022edc5e59ddb0f7062bfa3","sha512":"fa4250d1a3ba602f34424a1e7f6cae1c9078574731a97f7d5ff233b2f283df9b7b534e0b667276ca5267eb84892f4bfcf537139e83d6a58350f2f915cdd987ec","ssdeep":"","tlshash":"85a002921b8b2986860712cc648c3504609f527759c0db519d48eb708c7a2b52800520","first_seen":"2024-05-20T20:42:30Z","last_seen":"2026-07-22T06:11:18.57856Z","times_seen":2162,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d0fa772e-25da-44e1-a9d3-8fdfec84f7b9.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/d0fa772e-25da-44e1-a9d3-8fdfec84f7b9.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OFwzlT+P4XADuRCy2UWVi9qRvg+9qtS7hJx2mmLiMFuedPcBz43Gw2SPBPw1kPc19q6zR2HtnEc=\r\nx-amz-request-id: X232G91TGJSXG4PM\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:01 GMT\r\nETag: \"2c56a052345660ad6a7c6e688a1a3058\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 166741\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":166741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"2c56a052345660ad6a7c6e688a1a3058","sha1":"0fc34a8a0d5743e9d81ecae6cdeff33826d18444","sha256":"26f3ba0fd2212969ade9b2461b240d4da8425282d4b4f9b7b40c2d7fd7dcb95e","sha512":"56761466613fe6f3d07ff0d1c8e525f979560761b976154d8819d3a927a553af5245007e90729a21c2c5dfdcd027e50bfe1f705603921b8107221e7b9ee9d31d","ssdeep":"3072:O5Rlx42wKJn9+MTwXUW+msjBQpN4J8BOzEtMBoN+kehPvasuZEbDSl5NXt5VR:MRlx1TwB+nQrozScotMfSl7NR","tlshash":"00f313950fe64c41e667703cb0f824306bb25894d2512daece6684410eee7fe6da717f","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.427942Z","times_seen":7256,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":138,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-533124bf.74a37e9c.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-533124bf.74a37e9c.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3290-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3290), with no line terminators","md5":"793b62881d9adfee19f3e6451b7b897d","sha1":"512230e26300d583d6af44b5a2ef51b73ab24014","sha256":"3bf97ad8b6a83f799962b0fb5cc35cea0d9d4c9abd78678dd9e51f983b18bf07","sha512":"5f5cdb92e8b0124e7c556f6120cbd3b7538a02409f7638ba1d81220b449d910f047bc0945d5a82b31c95d1b9106c4e11c245d09b74e2d7195f83cd301faac14f","ssdeep":"","tlshash":"1e616170226a5a2e6573f1ba21c162ec760ca336e792cbefdda1801b8dc93f71170755","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-03T23:39:34.503931Z","times_seen":3469,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-2e9544b4.4e8d2ecf.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-2e9544b4.4e8d2ecf.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"25137-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25137,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25136), with no line terminators","md5":"47e7902a7159f39b01cda004a4a161da","sha1":"58d2f722b2ca111daf5c9b18e5198e6c2bb78c29","sha256":"f201f462b375b5c581675949ff5af797d69e0e2ad8be0537a16d16b4a0ea697d","sha512":"bcab113439048278ba03a8666e648e6b00646777286b2e89ffdc8ff8648a3d8ca1703ae1e91688f6c54959dd7153a1bd564e6aa333b28b7f7ad5f72526bdb076","ssdeep":"384:30rAEE1fkpzErG5A+CVmetjTNAAQvyL3tGV/Ufo74WYv1Rr:30Uz8p1nhe5+jyLIUgY7","tlshash":"a2b2f7dc34e1f0ad52f234e0009ba843b27b5a1ab84c1865e355d8c47836aded77bf29","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.648342Z","times_seen":2746,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-7809be7c.72b7d984.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-7809be7c.72b7d984.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:02 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"32166-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32166,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32157), with no line terminators","md5":"b4d3ba64fd641563f543dff8d3cc8507","sha1":"d29ed4362365d8e8bbda26659c48576ce3751d2e","sha256":"d50b21078d59591f3d5766b93117b82552665fde4a9f2d17957bbca1389f8afe","sha512":"fdb1bbc06146e20dc53dc0fb5b65d162716e3a2dfab97f15a34e7bf670c5b6d998b846ee68b3df4eb5c67992384ba60f42022a58bb6e0a08abec70aaee0532ae","ssdeep":"384:X5yZhQeA00Gb8pImstGkykyrpesDeIgnOujKRiqZL/u1G11:NE+wewjhOuZ4Z1","tlshash":"dbe21b53a125f45a5f7b6153309a2496a26819e868089c47f2fcccf633ecc342b1bb7d","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.487264Z","times_seen":733,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":0,"dns":0,"connect":0,"send":1047,"wait":279,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-813bed94.3cc9acb1.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:02.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-813bed94.3cc9acb1.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:02 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"21073-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21073,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21015), with no line terminators","md5":"55a5ad8afff5029c99a9ba63b9f1b609","sha1":"f1e34f87166d52ef1869e6b012592b083aa81396","sha256":"0fb49e15e15936c36ea3d91dda9c22f1f934931d318f1ac233025af12922a4ac","sha512":"bf9c10e9577c9a8bb1bcc9c7bd6a72d4c33fe6e63828ee58b0104e6c70e695fa360a8e8032a312ed77b50ce3f2547b27a42df75ad597b362fd22cbd158fd8cc2","ssdeep":"384:zPSsASXLk8mxDXbyuJzIXXs3iX775b/2MnnAbk7wK6ET:v7kXxD3Jordb/2MnAbk7wKf","tlshash":"7992ea86e072a8ac895b6250351eb3b4b6752b94a040c459fa3cddbc21e9d64333ff7c","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.541764Z","times_seen":279,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":0,"dns":1,"connect":262,"send":0,"wait":273,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/seller!list.action?isRec=1\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17025,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b335f0ed2964d466380c1a6b650b23a7","sha1":"85e8193bb65f20751a9fed5ed53890e3f1f4da3e","sha256":"51f68e19c4659641180d0b277e3bd9be06bd8976378f6e3c794c39e87ec02688","sha512":"f3acc280cee8411d37ab7b1e5372a9ad06046c3e801937e3fcc904f11bec0708ac8037426362996e2719c125784b17115bbd7fad4d4c13c47de9875f83693f59","ssdeep":"384:5qfIJi0ICF6LxrIRU0e15T+kjdM7wN6/k28xT:5qwJQV06Ky9","tlshash":"987293956e983eb1175d0e936c077e8bc5bc019f1e838eb0da8ccf0526f8ab5571e120","first_seen":"2026-05-17T03:11:11.542539Z","last_seen":"2026-05-17T03:11:11.542539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/matashop2.svg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:54.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /matashop2.svg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 17 May 2026 03:09:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 764\r\ncontent-language: en\r\nserver: cdn\r\nstrict-transport-security: max-age=31536000;\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (760), with no line terminators","md5":"8eb62794a2086aaebb2b371eb2cfd531","sha1":"78f96854471beb3c588213840700aa86a3e3afb7","sha256":"15f9697fc337a4d09a03b20c0b8ce628938d83cff2c91e606cf2214036cb7d64","sha512":"e7eeeb3859b0de7fc7c2f087220b57586e9ee8162b074b14050cb292cc63496f376e65bfe4a2bcfde205fd18ccdb861212abdea61cbc92b163187daa0e8400c9","ssdeep":"","tlshash":"6801203ec1061017fcb6487735913ea8395d8c8392720734e8548af4d2855f8a76178d","first_seen":"2024-06-19T10:55:10Z","last_seen":"2026-05-17T03:11:11.546061Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/78b9c29f-800a-499a-a640-a12d95b6cc7c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/78b9c29f-800a-499a-a640-a12d95b6cc7c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LRURV8hhr2itF7sApPsLNczdHgvqXXOokmmHXCBHl1VST5yzl5CovqYpxXZWJEPPSjijdAtkZYu8bFejqkrmd5Y7L/7IHCw0\r\nx-amz-request-id: ZE5DX4KHC0470HDP\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:47:07 GMT\r\nETag: \"013fe4aba3bf16f7e54fc87414f2fcc9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 48075\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 857x1050, components 3","md5":"013fe4aba3bf16f7e54fc87414f2fcc9","sha1":"78d37fb3e926e07ff603a0e1d2246523301dbf9c","sha256":"0ea676e6317e0aa668ec454888b2f5a28b97008372616a9b73246ea783643b4c","sha512":"aa8e69c89fad117f57c1d46dedba44e56721d6d8fb70b89b67e51e1ccdb5a8f3398c3ec85fe0d5f69827c0624bd1918b92b21e99f65801e1397232e705f3e881","ssdeep":"768:1cS2+ioGBA89RGlxoPquyl4Y2RKMmjbTai8u6JZfHRAQTGyGsp7+i/27pUi:45tBA8uH2RfmjbTTH6JZfHR79pzuei","tlshash":"8223f12856424859d5a1c1ba507e4def23c2b132bfc692c770cbf2481bea7a9f254e61","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.43477Z","times_seen":7388,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":928,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/60a1fbda-8b7a-4e10-8330-6b90300f8177.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/60a1fbda-8b7a-4e10-8330-6b90300f8177.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: L7ep1Au/KEM4Pye5g4HPkM3j2KUxe8NIs7/ZjWXXJfjkq7JEII2hlpZ+3k1F61v1rDTizGqMXTA=\r\nx-amz-request-id: X23DJWQK8DHT7PRX\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:55 GMT\r\nETag: \"6c940aad2dc2544cd2897468bb9fd97e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 68214\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":68214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1402, components 3","md5":"6c940aad2dc2544cd2897468bb9fd97e","sha1":"f72f714028b0db42c1ceadeb3bc0778347189736","sha256":"830c5b0169830cac824ae8d0298c5072a7c9c3e1ee9842303d5999480581c0c7","sha512":"e72e299e873c5e0388d40d8d18826cf5ebe692ba77e5b690e971d83a9b09a19bfb971c15f340e0aa723d50348c1dec3fd3ba62e25d0d4391192a3021244ea183","ssdeep":"1536:0o2PzgSD6MwWin41mI5QZahL+96BlxtYjTa0Kb0of:WD6BV4xuaI92YjTZKQof","tlshash":"80630291e1b0c897e821c7ba60407063f565cfa9f550dacbf36a49a4b2a1f450f2ddd1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.471955Z","times_seen":7522,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":114,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/38e35767-2052-47cd-8cc7-573464957f89.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/38e35767-2052-47cd-8cc7-573464957f89.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5BkrgwZmMD+ZY0UMljo9nlpHDlB2shCZlGyQpAWVNuTSXU6Pg9jfA8jqCX/H6/U7oV7frhJgCaY=\r\nx-amz-request-id: ZE5822B9MAQYRNS3\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:30 GMT\r\nETag: \"2e91d081bb998d2dddda0970b892c068\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 131190\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":131190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1110x1500, components 3","md5":"2e91d081bb998d2dddda0970b892c068","sha1":"af2243998869e67409f2286640fcaeaee6c70f3b","sha256":"3e4011f81f02eb72f8166c17ffdb60bd2dcb460319f122f87263a28ae7c132d2","sha512":"d974bf72387778c4243d91d1e4f0b7eba43cf7d9daefa2c52ca2dc38f2b463c530654f29fbf5fe239ae51e5ef4a1162e5aec6d917af1a803e62acb2bca3164e4","ssdeep":"3072:nd59GfT6nuj7Nkf062TrHvCFjSYnHL4kjwflZOhhQH8xea:nz9JujHCxr4kj4l4hhQH8xea","tlshash":"0fd31293668555b9e87107fcb8efe87ce11bb8a047dfedd9856008513b88b0f7e49102","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.385167Z","times_seen":7141,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: swaeohW2+InJz+iS+//CN3OGrP5tHe3gpVvzeAX9c6KWxLn/S1LKOhtqK3bS5Zx6RVwjzkAtChO5B+4SBKPzckklXG5U08NK\r\nx-amz-request-id: JPZG7CR1JQ9T72NN\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:49 GMT\r\nETag: \"097d83a8f1d7e6cddb5185b4a4ba2535\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 268274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":268274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x1280, components 3","md5":"097d83a8f1d7e6cddb5185b4a4ba2535","sha1":"ab81671e01e6eba67a4a834fa72186151180e0c5","sha256":"0ebd81023c36c931438eae38509e5b57f99193ae7b3441fc53f4001596980a4a","sha512":"c42e6a86e572eda0c00d6aa31142246d151b0e43748c4854f1cee9b6b492a38d5a982b841afde99c97dd641846fdb8333c355929821e5cd41cb4d62829f5c854","ssdeep":"6144:0AX0jPj12+Y21EFnxnB/NZZ85wy7z2pTEabsv:0AX0jb8r2mnxBVZZawy7zoTEabsv","tlshash":"7f44235a4bc2f0a0ee7eb221cc58d94d32c7f8bca05e985917461c6cfac90dc5a5366b","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-07-21T20:31:55.977229Z","times_seen":951,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right8.b1412bc5.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right8.b1412bc5.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4948\r\nvary: Accept-Encoding\r\netag: W/\"4948-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"b1412bc5ba0e763ff23aa08e3edfaedd","sha1":"d47b7b57f0147304de91e48497863d4bc90f2582","sha256":"a787935def85b5205fd886da2128855c877ab64a61755efee88d38c3f53d8b26","sha512":"d008c03d079a300f48904ce78873596b45e8d763f410e1707961ffdcd8786c57d2c78e9b191f42d50fba60009c78b843cdd0fd8cf4d3faac2c3d913c9cba0c5b","ssdeep":"96:Whjfa1ZcZcf9nqATAMmrGxCMpAdWWxzq/SVbFNXJakuuHcPL8z1UlmXexHgvMjH:Ej8Zbf9nXTYMpfWZbFNJuu8PYz1LOxHv","tlshash":"a4a17fcc3a345e7bff2491b3768b17391718092524bcc37921aa2e2c3e0ed704869d67","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-22T06:10:16.225412Z","times_seen":4730,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-5c861bdc.7817aba6.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-5c861bdc.7817aba6.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"21362-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21362,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21362), with no line terminators","md5":"f2e09c8bba009185b14233ed0027d8a8","sha1":"e639d1e25b9a3e2b6fada0766aeb0d89cfd74868","sha256":"14fdef686bc3fd5c8108da29280d3d054a8c60fe9891c1ede7c21013755480d8","sha512":"b079a820454522ff1e71f26034a9fccf7ed398b436f783e34c581bf4959ef7e8a82bb291adb8a221d715704ca7a85d6921bd78dcefd9236101dc3b7e42990528","ssdeep":"384:3Zg3/xKw8pUeX/pIFYJ7SMEB3bE4f6m/3oAgAWyCeefnpi4iYM5hfZGVRvLjhh+B:avxKw8qeX/pKE4fLALAiPLr+P5/eVy","tlshash":"4aa23b70b22c2338b837f26a19418addb854f363d5128396bfec7322c8c32e36978555","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-06-03T23:39:34.483082Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-356c00b0.ee0b96c4.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-356c00b0.ee0b96c4.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"5865-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5865,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5865), with no line terminators","md5":"40fb01e2fe80775f7369a6d6f09d609d","sha1":"2571b255c504ff9461e5fb51145289ec4fbb50d3","sha256":"91915c5553f57b8d95381d29b1788b6c14a25fb14f096342879812bc02828362","sha512":"7f1513f8a4dac24c38aa128b7a96fc37453735aea049d391b06d1747eadb9b4eb1605c4a689f6993355bfabc0d91abfb105b8c0608c912d32f38f810560958d2","ssdeep":"96:GXzENwxyzEB7Xs7OOOOPOOOO7j7Tgeg/4zEoWayngdeVlWXShAgmbIkwa2PKJyUA:IzEOxr768X/3oFyngdSWLPIk8PK3fsXR","tlshash":"f5c15b7aee39c435bc2965e3b11909defc0c801aaa494775b7d17b3580c3ad7176c28c","first_seen":"2024-05-04T04:46:07Z","last_seen":"2026-06-03T23:39:34.620523Z","times_seen":1413,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Nz57n/jEo3HBpiA3rjZWpm7v+VH4QVdlc6EkhTxMOCKHjWTdsww2KIIZeTKW7JbBZ+cFQCRWNP01e5PCeAEVhJXmSUOBTQiO\r\nx-amz-request-id: X2374ENSV0K78ST0\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"a5941f987a0fe015714bc8b8cde4baff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44216\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-23T06:19:40.699935Z","times_seen":9914,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":436,"dns":136,"connect":94,"send":0,"wait":123,"receive":96,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/02a275d6-f6e2-4a03-863b-4f4a8e5553a2.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/02a275d6-f6e2-4a03-863b-4f4a8e5553a2.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wxIfaV9HaW8xRYACk7f0chWtwQX6fiXRLn5FmHmmxhQTHdXPJODFmhxFGFum7ORbvwVH8L3bM/GAqhqSBcATcYLN77rP4Mix\r\nx-amz-request-id: ZE5BWHFTWG1A2KB1\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:35 GMT\r\nETag: \"5a1dff9153a77d8a9378efd305a31020\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 224131\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":224131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1220x1500, components 3","md5":"5a1dff9153a77d8a9378efd305a31020","sha1":"b280f6a2970151e339afd5e73361e0c6a734744e","sha256":"8ee4ccfa0296fd6e5c7ca878aa83aa308acc4699ede63a1cabc0be5af3798602","sha512":"abeb0d6350b6e478258e33713708899eff0b9a58db05b3137d5f869ae78214493b0829a025a3d5ffee54038c62d08ff38f0ae26a011960c0e5a08ed2ebd2e24e","ssdeep":"3072:/Oktuw2ZB4RVrrrV2GlegkDtLvyrA+PmwLiixr10oAIC1yQFMQLNXNP7g+UB2qDa:mktT2TCOGeLvIf/2IUyKb62qnGj","tlshash":"bc2412a0e302057ac0fd497d1cca4627eeaef7ba61eef102c42768103957736b574a67","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.48248Z","times_seen":7471,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":926,"dns":0,"connect":0,"send":0,"wait":117,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right3.9c862538.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right3.9c862538.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5499\r\nvary: Accept-Encoding\r\netag: W/\"5499-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"9c86253815081c0c34036ff07d755cb5","sha1":"c76c8077affbb0a17ef370150dfb718db290a455","sha256":"29f7b8a55109e9ad235762ef2edf7523357ac563202f2ef931aa3099685c9e8a","sha512":"cd0ee09be0e8c939646c3e72e32a70a37017bb27f5bf23e3167776e8aaf81c0ff3868ecc1eb12df37341088e1aeba54cc1605c88aaf44a89000a8eb5b53b65a5","ssdeep":"96:Wh4J1bDl2qrFHk8A3CrwfOIngvJlMde582vqxe2CjEploBUs3:ESxPFHk8A39QhDQVoBX","tlshash":"04b18e9fb6cb7d90f776043be0c61d5522d67b0615e0a7fc8098aa4f98bbc714d10879","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-22T06:10:16.168312Z","times_seen":4704,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nBArQ03LXbzFxMnEZEs0vIFtvd8v0V0QPz2nhKtPZfrqA8t4rFRIIxVdWGcBeNQFEoKVCn3tdvE=\r\nx-amz-request-id: Y8M5SMQMR1W5NBDW\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:21 GMT\r\nETag: \"5eb7c18e0164431bc4ebd5432142d478\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 62006\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 992x798, components 3","md5":"5eb7c18e0164431bc4ebd5432142d478","sha1":"0e7463b4754fba04259090a3e6c70865b6acde18","sha256":"c8e8e1655371e5817147fb849721d215226bb8f03e99bee89e9b3217f91187ba","sha512":"0dfacb79d468692bb1e777bfc2311eb6ae4f4de8d4f1d4f273a6e918a7538cc7f7450c577a7978b281b8c7c8a8f1cd224675df0ed5af052e11f82ec4acbc3af5","ssdeep":"1536:VBqvv4Wcx0q5rQdsUVr80gBJB0t+QZb2sG1/:wv4Ws0gUyUVrRgBJo+QRGR","tlshash":"0c53128569a9b165db633ab88e06708efc0f2ca6eef70074210dd3d93074af1bd4a45c","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-20T07:32:07.995113Z","times_seen":2451,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: h6cskl9flQtZkRgF/1MnFTFRiHHn8JklG8M1XQ8kt/kz9veJc/rpWYZuUt7XgjCxxX6I5bXhiT0=\r\nx-amz-request-id: Y8M73VQV518B9KR2\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 13:50:55 GMT\r\nETag: \"cb24f33cb4ff359a439a0d73bb6d2752\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 35067\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x1000, components 3","md5":"cb24f33cb4ff359a439a0d73bb6d2752","sha1":"c2cd25233de083ef231ecb1e99144800c46e6d02","sha256":"e0c66d00c9f5ac611d2f61f078eb40db018df1c3af4046bca89a51d4d4088a86","sha512":"d0ae7b1278b28519a69abd0b69d83bf426d16ef8e87f2008c2c3eeb5ec0c32dcd725f968a87a6285abeff6e855ecf59a4cf4891eb12abb14a2f62dc74fb90ef6","ssdeep":"768:1K+IIdonHnMKYMvOjEXpdfUbHHOXMG5NUnLlRFdHLebFEPslsnQrqXU2:IPI2sBM22obHHFacR+ZxsnQEb","tlshash":"97f201b39248d715c8684bfe18bf1ae7fa8c90e00daf594245300c52be5ff902a1b5f9","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-20T07:32:07.969637Z","times_seen":2279,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":115,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-2849664a.b30d78dd.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-2849664a.b30d78dd.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 340\r\netag: W/\"340-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"7de78efe8bf09e10f280567a395d6b1b","sha1":"a84403256fb9c265c757c632def2bf3681d921e3","sha256":"3c64df4c1120ae8af09b2670ec78de64165c17cfe281e9fd19d9a55277f38b77","sha512":"575e2e01d3b715fc66a4de91cbe6cde658c2d3953445a92f711f396196fe921f1ff198fa691271c8670688cac8b445a52076248bc01382ffdd4b6956c1137eb5","ssdeep":"","tlshash":"f6e020708b561089952be1438b034cda2af9e663d16395855fa3d03dd46704f2e2a785","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.395716Z","times_seen":7633,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GP9cK6mFj74YNzwEPdIbDtRGi1lCsnyuRfRxqzekbYeXBxP8LsIsB7+9JHvTwTPJp41MQZxaqLM=\r\nx-amz-request-id: X238N16ZK9DB3P0D\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:21 GMT\r\nETag: \"cf0c2ebda19a43267a2348c11f0e9b1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 104771\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1166, components 3","md5":"cf0c2ebda19a43267a2348c11f0e9b1a","sha1":"f530278c1954d58bd91d7fd632ec98745670d158","sha256":"f38fad678825212dd76b489f41c44d65f661ffa87f0391f2a1f12823ffa01adb","sha512":"d22c73c72f3979b6d42c25bf33b4dc242900c7923bf2a5fffe6eb262a1c94ec32958594df688404505b92ae99ee8213518bdf76f2a6b4b63c96515899aa48014","ssdeep":"1536:4hPJiIGQfVd8Vw5LuDqpota4IsA1zT05E/igYy8aiPVymyKvgLgwwdmFwXlqfMKi:4hPpVWiLuDqIAkzy8aiPVy0vQ4R","tlshash":"c3a301c3611e5ca3c9381877233286328fb7e7c7c15da49cb458aa29c1e97bd3db9095","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.472783Z","times_seen":7029,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":3,"connect":93,"send":0,"wait":117,"receive":189,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/cb96f794-0a2c-496e-aa26-ab6b279d2f68.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/cb96f794-0a2c-496e-aa26-ab6b279d2f68.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: oUVlWuIxj7gCpFm7hePZjCHlPqdtY8U5CWsTVUCRTYIOoLSufGB97kjX+q+sRdGsvtAMsj1PBus=\r\nx-amz-request-id: X23EFHZ1NKN9Z2W5\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:50 GMT\r\nETag: \"caad5ce9aae1754f7c5bddfe540beb9a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 56451\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1365x1365, components 3","md5":"caad5ce9aae1754f7c5bddfe540beb9a","sha1":"426aa6930c891900c2d0c7f153ffd99e5c60f92a","sha256":"a60a9f18bd2465a00567a344571f0f0fb16fc4fe351d8f075e617ff68137cbb6","sha512":"131af0909590d760d92254d35c5babae05a08fb8df701421723558815221389083186103f86f1f64c08d95a879361f99a310df2ced8bfce63bd8a414e0e806a3","ssdeep":"768:5SZ56j1M27ehueo9GF5Hl/cnawaL+i/opyDHiu/UB/vH+fhQO5F8h:5SZJhqEF5F/cnJaLZopyDHiuMR2Y","tlshash":"2a43d9078d058bc7a46dc7e8be034eed5f5a6b18e4823eeb50210f8b7e212574c8e56d","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.526907Z","times_seen":7229,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":578,"dns":0,"connect":0,"send":0,"wait":127,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/24d6b74e-f4eb-44d4-86fc-bba207f24d23.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/24d6b74e-f4eb-44d4-86fc-bba207f24d23.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Al93NJeC73iiQiAdEsMDAJzeNZKe4YiVAJDUarYIxVgG6g3YOCMe4UxpafdQuZ/fYsCGCbqn7Og=\r\nx-amz-request-id: ZE5DVPCNFAGXJ8GM\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:46 GMT\r\nETag: \"9be647a74de795386541434285edbd8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96163\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":96163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1125x1500, components 3","md5":"9be647a74de795386541434285edbd8d","sha1":"b503f1ec4dcbb115539579fff23d285ec01d8748","sha256":"6947267bc07c27d8485e3a3894124696aa1ba4508f3ceb62fb5f418b95a7fed8","sha512":"2582c3ee33760146f1361c15033d5de58eba750efc02284495aa1b16d07dbe871a87959c2fc5b85588ff2ad53625d22a622638185edbba7e080ae2fb8a97a91c","ssdeep":"1536:EtvRpIwrSu08Tz7lp0RRZhNrJCJbmvU6Vt+CgTVTdJFrqGssfQWkIfYEnDIzclFd:8vRUuhTflpyzCaU6vTgRTJKsQWkwhGct","tlshash":"439312914b80d763ee3d733669b9e7724edb5f260a35812a0f1c080c6dcf992e61e54e","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.534963Z","times_seen":7305,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":650,"dns":0,"connect":0,"send":0,"wait":115,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right4.6d5f23ff.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right4.6d5f23ff.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4704\r\nvary: Accept-Encoding\r\netag: W/\"4704-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"6d5f23ff9ecb9724c07b2cd1541269f9","sha1":"5e750c426346b1fc8fb169ce8539ac98a13614b1","sha256":"52e08b3d2f52fb6b3ae31c2df98abd68fcc703e02f2fc21b68743f5f0f254d1c","sha512":"4a3cdf202ec25973c245ca77c96782ec1b6b9402dd6fe9d654dd3696b2929a1f0d2d3ad76d63a40998685fe0debf4ac2b66c742307b7f8a8040e386e64c72eb2","ssdeep":"96:Wh+tAiYHAua4Aqt9u4F3DRBfO18AB/x0qaZIPdwR3ODcpOfxukRbnCRTVMfn:E+tEgBvEwgRyHSIPmR3OD485hn66","tlshash":"43a16e9acffa688fff121f7ab124246975810e026a01aaf344014d7a7927c318743596","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-07-22T06:10:16.181017Z","times_seen":4726,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-5a8a56f2.606de64f.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-5a8a56f2.606de64f.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"8245-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8245), with no line terminators","md5":"56230f1334912a7aea5aacd4b2ab6cbe","sha1":"d9512e8c90a146a642b90a9a239de61f3cf8bdef","sha256":"a59393c6d89933a281163b9ce10b7cca56f5a0a77dd4589e1beb930e50487f3c","sha512":"481d48ca0c9c3be165de88daa5770780b0459b1bf5064dabd9619defa9167baddc1b74e91df3829b044426aa6e5c817e6b715fcdb69326b30e0d40bd93376cf1","ssdeep":"192:IzEOxr768X/3oFyngdSWLPIk8PK3fP5iPxaXo:iE4f6m/3oAgAWyC3sPYo","tlshash":"2702c7b7a5b2c4356a2bf1a6b56895fc7448c222ed9287e5b6d47234ccc32d303a5f4c","first_seen":"2024-05-04T04:46:06Z","last_seen":"2026-06-03T23:39:34.457943Z","times_seen":1433,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PBVC7UF+zy0tfoL7KBTheqi5W+/ie4pbRjM/SQ3ejxv6/fxhxmDNDuN1AMtWj/5W8FUamHAY/fo=\r\nx-amz-request-id: Y8MARKBF77G8M8JF\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:24 GMT\r\nETag: \"188e058e6f7fbe9ad0a5f77351993576\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 58343\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 887x658, components 3","md5":"188e058e6f7fbe9ad0a5f77351993576","sha1":"5aa78ff88b30cbd54edb475d4275fc0d4218497f","sha256":"0c05def09a06513f1f4642a32933517dae2a570113bee37d42eb032886be835d","sha512":"bdf8a4a595692fbe4e7852b784846f1a76a87e36bde4e0a4d20eb190020965784572ee99ea2df88e46b3f22048cc6b2a04fd179d1796a7ab3b4911a699a230a8","ssdeep":"768:1708n17R4+OZnvTjYIoH3etV6CFmPxPoLsRkmVNIHEGjLF8asgzZ0vc/aT39Carl:d07BTjYfXet3mZPoLgknF8BgkB5rDZ","tlshash":"3643f260337882f3f1bbb8386b8d3a1a5b55b4975382cdef11126db2ab07a51745438f","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-07-20T07:32:07.952542Z","times_seen":2459,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/4d106467-e1bb-4199-91a3-14c09c397800.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/4d106467-e1bb-4199-91a3-14c09c397800.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8wh4tHsAzPm9Ncw1SuG+/6luR9ki0MBTI1X3Fg6zFnHiBi3YJUOl366gUyT9sQV7z7E0yboI7GY=\r\nx-amz-request-id: Y8M2MTRM1GG13KE0\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:13 GMT\r\nETag: \"14d9f42f2c63b1613cc542428d426122\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 82584\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":82584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1470x1500, components 3","md5":"14d9f42f2c63b1613cc542428d426122","sha1":"00e4462aa838f47df6791daf815e8eb0a5cd4bdb","sha256":"755dcfb51fca83949bf37ee825b678dab8b0cdd28d284dc614d367e147e6464f","sha512":"f306d811d90201f184c9381f938e563403ccdea51be8dcaa96f6a040424410bb313194077dbb6431ded01deeed1b7fd7d0698b962ffd3c6c2b04d3f886619cb8","ssdeep":"1536:GnQEa9MqP9A4s7zP1m7+PpzKo0Rm6c2/DJfjgo48h58th4WsEP208:7EadHUj07+PENRmLmlf94AetuWN8","tlshash":"e78302ed3bcea846f6ff59bc185ff48469120935eb324643e31274d8c6b86328f25465","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.532436Z","times_seen":7164,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":115,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8EBrtCwigmo0esgE8GtWmzprWpMyl2hb8wBXmq5GvRKr7H3kF+p7oldtNkLObEVkJxMQBVUgoIGYB3BPwRr2NO20FrNa4axa\r\nx-amz-request-id: X237P2G52EKAN7SG\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"46155632d481869cb9c3e853c7832bea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 39527\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.791717Z","times_seen":9957,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":739,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/c8ec458e-d863-4987-962f-ffcfe4f54175.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/c8ec458e-d863-4987-962f-ffcfe4f54175.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OLe+UkZrvGwGGC7pddhWiy9W9rfHNNlNAlYFtScFAxNTsY4kvfsttMjhuLPTVUpRhM0fafHl0h8YyeVDig5K2/RLUQZdgWic\r\nx-amz-request-id: Y8M2FQ6MP8B4ZEK9\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:09 GMT\r\nETag: \"f87e7fb1936b7674ce2db3ff1bd51be9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 70050\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 998x1009, components 3","md5":"f87e7fb1936b7674ce2db3ff1bd51be9","sha1":"74046f5896c4ea5701895a0bcad36116deffd811","sha256":"15161b624d29b2f059293432a831953d9dccf18ebf936b3d3c270f12f152a1dc","sha512":"4bf20c3b3d382756dd00487976c63700cabdb9273be6250cec348f8a27604c9fac9a4317cfd7b4225da86e197896aa28ee32b2f53cfb6322ae45a989f2fdf3fa","ssdeep":"1536:xf/qZ8RjuRFR+sLKaSC5PHX+PShIh+jNZZYb:xf/zR8FknaSZSCh+hvG","tlshash":"2e6312c28746312bd3da7733236f4232f0dfa3f6db2248dad208214a52ec6a41d794b5","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.524928Z","times_seen":7016,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-4ed2022c.72467277.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-4ed2022c.72467277.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"15192-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15192,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15162), with no line terminators","md5":"98d29844a8ae4e1d949562edefbb70f8","sha1":"4ed6e1cefd4c76a87d96728bc9f7fd750d5ab24f","sha256":"c3375e183a47a69ad4055d1f63af1f681ddf2575c8a2480e781e47638c190b14","sha512":"6632ecc325092bd353570499e767f88b68358a5c2f7196a4f382a291f489f04d10e0b90733e91ed402b3766c0737523aef30cf76727d3749a5a016e5bcf6db0d","ssdeep":"384:/XG2CR+gwJ3INfAKA5kzhXbFNu6MoswrGx:/XG2CRAIbNu6Gx","tlshash":"f46219122185b44d9b7641b2316621a171653ac6d40df0abb7b8edfe32d9c18372fb2f","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.585305Z","times_seen":277,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-91f4e7e8.ba995d7c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-91f4e7e8.ba995d7c.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"12297-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12297,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12265), with no line terminators","md5":"60568719e38e3bff51270c1e1fb78927","sha1":"5cb84b41cb17300dbd804b5c411006fad12f4c73","sha256":"5fe2dcea3b5441f67b4961168a1eb24667bf776a1451607cb27512d7fd20c96e","sha512":"a1ddb18d1f02d2aa2160d3676e3e7dc0ee0c192bc05bd77dba6fe369faee47e10ab49d9eb5dda97af0ebb2f87314cddf128dbb60a02fcd0e4f561f18231f83cd","ssdeep":"192:5Bo3gsx9fnS9gHJJhDJzfNcj1iXcFW32I5eAW0Tu8M5hHBaSLob:gbx9Bp9zfNcjVWgc05hq","tlshash":"784295097153b12e5d6b81a1300a7420b6743fe94805d08abab8ddf977d8c79732efa9","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.652693Z","times_seen":879,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right5.1ea7fcc6.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right5.1ea7fcc6.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5524\r\nvary: Accept-Encoding\r\netag: W/\"5524-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"1ea7fcc6e9b3100bffbe6b7f028ff17f","sha1":"61c58566bbc59e3f7eee8fd0ca827c00da52a17c","sha256":"a3b706331a70ffa493547d558a58857bfa2dcbe54f11b19745a8c0ec4692e045","sha512":"7c129d8b0f97c5c3645a966ea129cf352e53997c2caeb88d975a6774bb157808dec36999b766942663622fce8ce7ea387d4a2a5f4385cb68481e554b4dee4d05","ssdeep":"96:WhJUFeNHgld/rdM2oX1pfs1BBfcVq3CxmaiVFMbo9qJC1dwH2J34Rm1cum8lwoRY:E5NH+BqBl1kBBfc1xmnQ7U1dwH64AyuA","tlshash":"d6b17e19e62eb807cb2aadfb2d5c259661011ab47f1c0bf245b121ddbd42cb1af15314","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-07-22T06:10:16.272826Z","times_seen":4703,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/newOnlinechat!unread.action?lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-23T06:19:40.788326Z","times_seen":8753,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/afd940a2-7696-49e5-a23b-ef4091c6be16.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/afd940a2-7696-49e5-a23b-ef4091c6be16.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: aRUqZyJnpqFx2NR/wCV/PRqzt4qnysSQDJ3bxfft/wGsfqE/ByURy6ORB8cfiVQQPMHVY7hB6VraDD2KG7L4BaVofq+KdNaq\r\nx-amz-request-id: ZE5FXTM59T7REQRV\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:02 GMT\r\nETag: \"5c856b901a31b431ed87f5e70ece2e82\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 32548\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"5c856b901a31b431ed87f5e70ece2e82","sha1":"3d36dbe905fb3ec08d6e8fcd0a61f98d77e016e5","sha256":"b8a774934093913b41038bef87cf16ba142f42b56dc355c0f616ac698fe6c0c5","sha512":"3035c4dcd9cc694c9fbb367df7108be00dd1627c8a7280cc658a4e47ed0d1524ec3e9ca940a1ef0272261f1732ab1804b0a752976a5b825781635933e0545eac","ssdeep":"768:1/VsrQ3PEM1qQdGRlh7Cp/KRiGD1n5MQviY4cE9:1UjAT45ciAYDiwE9","tlshash":"b7e2e137732d99fada286af10f6763502b878cd7ebb4150522632e7026511b07d7e0eb","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.502716Z","times_seen":6482,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":992,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Wg0v3hkKYZyEW8hwovNF5IzFgCxJ8SRAW2bdsFocR4vewOMF9WCBWGwSETh8KIKj1URNRFk+Rqg=\r\nx-amz-request-id: X233GDR817TKDBVZ\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:46 GMT\r\nETag: \"6c0d8870785f0488d0b7142263a15170\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117525\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1417x1500, components 3","md5":"6c0d8870785f0488d0b7142263a15170","sha1":"aba57b51e93b5fd1a624f84850eadbaa1c110bad","sha256":"3a90f757acc9d4e5d3088beb21be69f9542bd7e056d6a936d4b920ed7286b665","sha512":"04e4da2f923f15b3c32d6329c9e2f1cbe4ce58f8f09fd03823529da74504d1fedf8317083b1ed370ae9917cb5fade27933d50d4506c1b1e22f373e6d421c7551","ssdeep":"3072:FpBFO7JLZw6p1LoD9WiupE9nfmQXdxt+jm9p033qF:FpBFO7brLoD9WiUEFmELtZp06","tlshash":"f0b312f876a8e373cb7a3e3801d9e95e9c62d16e653ed4524c79144d30100f6c9ce9ae","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:56.000181Z","times_seen":2440,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":555,"dns":0,"connect":0,"send":0,"wait":112,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/2b1f361d-49af-4f07-99de-f8e65f804abb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/2b1f361d-49af-4f07-99de-f8e65f804abb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: c7Y9p5jQpDD38vPbltGyoHJdEW+UbG3dZWK7ks/c+zx1crLv23Uohw4aZr6Sr7u0gYl/MWZnatUnGw8eGWapAzmfQn8TbGyz\r\nx-amz-request-id: ZE57JA0X4S7M9H6Z\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:09 GMT\r\nETag: \"8e45ef03c4d3d3f8338e907948eb5268\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 55668\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 962x1031, components 3","md5":"8e45ef03c4d3d3f8338e907948eb5268","sha1":"6d8847195c0a42f8310bdcf575ea57a0bb889766","sha256":"de9af8571cfab6b7bdcee5e4fc038ff690fa02e497205a7136633e8fd284f600","sha512":"c14e594f7bd92be09f77d59496127622a20d24f54f2dc28cfc34c33e8f579d2a39d9308b82023403476d985722a30b6bdeae0f8ac97cb69fc9c2d0e466064da3","ssdeep":"1536:d0B/FwBZy6t1n07VqLvJ/qkz5HvEwW2Lto8y:qVFSZd11NpjWX","tlshash":"f84302ca57610c98e499afb2377f37079713a5ed493026a33de69aac110cf112876ef4","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.508434Z","times_seen":7328,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":889,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/avatar/2023-08-04/08b200bc-48ce-4aac-b0a3-2358f9717edc.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-08-04/08b200bc-48ce-4aac-b0a3-2358f9717edc.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bqhMlsmdAUrpr+xYzLjKOGsbBHvE0QTJe0z6xUYcINtA21JClofnL5OAytZ6pi77kuaG39bmQaYCusWNgN6Txv5TcX+uTh6H\r\nx-amz-request-id: JPZWDBS00WEF6J08\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:20:56 GMT\r\nETag: \"9095f521724f0cfde016c5e6712d1652\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9621\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x226, components 3","md5":"9095f521724f0cfde016c5e6712d1652","sha1":"69e3e10c450c375d672cea90a76b7353f203fd53","sha256":"55301f9f1f0741dd035d68d7d95d3d58fb60c7bdc5980649df58feacc8f2da25","sha512":"249f18300dd8c696d63b434d4cbe45a1d0a826942d3cf7e314e2a6d2690d873c9f4d2235d5f4adc43e3659fa3a2a0ad99de69b15dae225d1b64e00dde4bf4976","ssdeep":"192:Q1F7xl2EcFXZvX1TqDy7JwlUzln7Tsadu6KBz9aHD8vcvw7zqhytgKDsjK:QrV6FJvX1TZ7alUzlnBunwDygotDsjK","tlshash":"e112af71a782c9c3d8eaf4eb447b332159d9cae11b21742ac50257f8386e6f1553338e","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-05-17T03:11:11.595185Z","times_seen":340,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-43f51806.0daa9b11.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-43f51806.0daa9b11.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1374-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1374), with no line terminators","md5":"7a0ea81bab09a5e259ac1884d3f72012","sha1":"d87441160241af9deea25169e8fb52a8537929e3","sha256":"b2217a779e1c0810181c9c1cc122bbd3ff1ce69d94164bf7b1e308cceb93e2c6","sha512":"a0d4c2bd68e73bc95ebe419ae4fa1a9210de9ff9e75bb7c3694bffa92fffb77dd7373bc7c3585ba1a9a67b9a3d0207afd87e34d630ba821177a70512c061bb98","ssdeep":"","tlshash":"e3215b00355e673edd37e67e64805abd6900e26bc453e227b9889405cecaa572813ed3","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.393299Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: V0HZ00sF3LY9g7q4O/4BANFdk/jQ+J2ADiTRCMwZuL8Er3zkc8tpOpcXdqt31Xcb8GnPMTcsicc=\r\nx-amz-request-id: Y8M59NAXKNVBH0DK\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 11:55:37 GMT\r\nETag: \"c07031c87ba3f296b2a29ebb53a76efd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a\r\nx-amz-meta-s3b-last-modified: 20230429T135853Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 50291\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":50291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 546x1500, components 3","md5":"c07031c87ba3f296b2a29ebb53a76efd","sha1":"8797c19f69bbb48e4c42bd372747c9f72a59424f","sha256":"0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a","sha512":"65595c1eba2b03cf51675d61a3973bcf1237d19c85cefa96919172f3a54a7ed6dbd32877ccf384acc924349de486e770d07272aa2bf59eacbfdf8afa1d589ad0","ssdeep":"1536:+XiOB0fBqBhRvoS/ImRQ6o/Ka3yaegiBC:+SuvBTt7Jo/KW6C","tlshash":"0a330122c3c962f4f8011fbd0d03a1bb54991908570a9b3b376a6ab2c7641496fc7f6f","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-14T05:45:08.741567Z","times_seen":2423,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":119,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b8e5eed6a324a2819873cb063844db8","sha1":"0b406c4904cdd452613282e62df3defe2335fe40","sha256":"77570335be2b5154848a1d9b6355620011cb7a665c6ad99740dc62714b3694fb","sha512":"890b2e5d2b3efbe395d387d5f8ac82270b766a3104be82b300fe0f5957adbfeaa52533098a6c5d06ba1b0f9ca60cd4c50f81e6f7997498883cbd3b68cb234cd5","ssdeep":"3072:kO9WnsSPIJswkdXhlfmjKQU4ZJTGyM9Q6/3BZCa3u3dcWZciaIf0djNConVKD:1lMhlfim4Y9tZt+NcOFCED","tlshash":"dee3e842c398926a1f64019544167beb98fdc117dbb34f98ed2cde34ab98cf6771a08c","first_seen":"2026-05-17T03:11:11.599409Z","last_seen":"2026-05-17T03:11:11.599409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +f0KvjxvxPrVry91PoHcpMUlc20NjeRuCMhMWpX4fWAwccWDcwmqv4XeCC6u9yuHIHTgv8phTkUCezO+16I5B3Fkz2ZmLi9k\r\nx-amz-request-id: ZE50YV7R2CZ4M8A1\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"8d6323e7fdd7e06d404af122b2c85f3f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 22652\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-23T06:19:40.80701Z","times_seen":9845,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":933,"dns":0,"connect":0,"send":0,"wait":115,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kUnZNla0oDEh4xRRQlJ6tJPDZ1M3InYdU1sJyutEC+dsN/Ze1gdos9txWDx5cRnCPPY/imMcEXw=\r\nx-amz-request-id: X23F4R5KKD8WCJ5K\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:37 GMT\r\nETag: \"69ea9ab0655294c4e81cb9123f9b84ed\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117788\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"69ea9ab0655294c4e81cb9123f9b84ed","sha1":"249e0e3b9f9c8ebb9d3c2b0e8f96db0bbbb96233","sha256":"49bd15612e8028f820eea86b82dafa4d5e439225445e527cf5a3232ed060d942","sha512":"4e05f275f9d9ccecc1ff61aaf45278811f0062aced05aac2d3d4c7648c4be9e1130cda1ec819a3a4503006a7c49b87fe94e1bc71657c2ad2708080425857f71e","ssdeep":"1536:3edS0foEyCuEPL1TVLKPXCTmcgFbbLmWEDBygAcq5qtlDRVtU+e+aPZl6ejI9li5:zCAEP/ICIbCWEBHAcq5ylFVBIuNuV/lr","tlshash":"18b31204277e7cc1c2f9a176c8b1567a57b5c74ee2dd9714ab5a3401cfe3a202e10aab","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:56.063423Z","times_seen":2394,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":553,"dns":0,"connect":0,"send":0,"wait":119,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-000dfe6b.1a6d1746.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-000dfe6b.1a6d1746.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"8091-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8091,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8091), with no line terminators","md5":"d67ceecb44d29150d361351ee175229c","sha1":"fa4ca7c2c438a2deb58000158d31098ea21f9413","sha256":"98db913de269afb388306c65905a319b49b599a01606da25cc1888af34f360c0","sha512":"158e90352ec3601e67a776378310dcba8fbd3a76c5bcfec64e376bee9108bb8ea164f1e5ec98e4bc25a8733816064622b3e4984fcffdc7b759565f6aaafba798","ssdeep":"192:Ii/AYIgJfN6z4J7HxExWmQP2Rp62AkQB5Lsy:fIgJfN6zK7HBZf","tlshash":"92f17442700ba59dc89ed01261299a30f0b61fa49811d4cfe77dccb8a5c8c65bb5fbb9","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-03T23:39:34.495903Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-74926972.0bd1ca12.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-74926972.0bd1ca12.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:02 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"89105-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89105,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54759)","md5":"17b98542d286b81ac2ed796cb35f9c64","sha1":"4bdf5ffeee53be6c7a1e720138fd63b562ee2cc1","sha256":"43bb879cef41b63008f6eda1e44865f5320444038e19772a9538c7bd5c8d8499","sha512":"a6c1dfe2dd9cd75150ea9ed78f22c84dc2d5a011f6af57f050b72018ccc0d4ec5f90e87831019aa2008b33710de9d614bad1ad56ee76c01ca6d52143f46aadf7","ssdeep":"1536:XVpb5uz9we4EPsStPHXannPzQY2Y2eN8ce9PNoZAlE2f:XJ3qHrY2g+ce9PNo2lx","tlshash":"df931a88f2d5b17603a355e0442f140bf176a929a84988a8f734d4e1bdf4ecea47bf74","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.631042Z","times_seen":2832,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":0,"dns":0,"connect":0,"send":1052,"wait":279,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XU1Fq1jzd/4i3I7b7hknMt6/kEUEqhkIb49IXObxsOwElZYv2NF/a0nI4m92fpNd4GwtI2vVYc4=\r\nx-amz-request-id: X230P51T3AEGE86T\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 02:20:51 GMT\r\nETag: \"933feffc6f87b5e835ebcefde5c5c67c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3\r\nx-amz-meta-s3b-last-modified: 20231029T132225Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 45111\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":45111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 499x956, components 3","md5":"933feffc6f87b5e835ebcefde5c5c67c","sha1":"b4961dc6b0b61aaf05cc9e4ffc4318eaaedd60a7","sha256":"8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3","sha512":"1fe7f9b5dcfa651626616464fe7b1c25946eb77d2fb4d6739bb2cd9e9c5012feef50e8928dbc6ee5a125570949760b702b647bd4ed73ea7cde3b4cb853a45bf6","ssdeep":"768:ygg6D3BnJNDyRk1XT3cR1EHhRToTNw8sDd+TnRrJq/TEdjBxT1:y383hPSk53cRiraNw8sDy5dFx5","tlshash":"0113f1cb2eac3597f1ae313bf24150414b9aebd1a8b0da71752380441435b7f6de746e","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.951881Z","times_seen":2414,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":354,"dns":0,"connect":0,"send":0,"wait":117,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/goods/2023-03-31/e176f2b0-1aba-4fa7-8696-c56d6f9452b8.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /goods/2023-03-31/e176f2b0-1aba-4fa7-8696-c56d6f9452b8.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kmvWEaFBXvo3zbDtLRnwYsqb7NMmBw4ZtHUiNMYPspOeDlazkwSdfRUxCcPezu/VOFxHSCOlPV4=\r\nx-amz-request-id: X2308G3VMKEBVC8T\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Tue, 21 May 2024 17:40:10 GMT\r\nETag: \"d41fe5fce66ed4dc3bf1fe64e18c2159\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 90073\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"d41fe5fce66ed4dc3bf1fe64e18c2159","sha1":"87abf9fde0e3375db455b1a9784d165757315ca7","sha256":"1ac5dddab96f0c70eea490a04579aef746677d90d3c204c74dee3bc17ef57b94","sha512":"236b84f90cbe5b337dcecf1f884fcb09370573a34e86e74f90f0214972b3f20ac46fa08760449fa65e6b3fa8d8afd4327d7d7856bc1d3e247aa1f4218481c564","ssdeep":"1536:byNX1R0c4VpeEH8Xln8Hcal0MyuFmCg75X9RGU1Pchv8dZ/MI1eWbJ2y/:bO1RmqW+R8HcaCMyuitRGUqhv8D/FEyZ","tlshash":"999312bd6418b871e121e7e7286912d3a82f64c6532fe3d3cbb4e78e60c4f851d5b861","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.406487Z","times_seen":7086,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":586,"dns":0,"connect":0,"send":0,"wait":128,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2p0qQy2Dun7PWDS694gEa3eRSguydz4T0Ef+4dN//DRqbgRLc5ZiY7lvc+JoqyohXUIzbAWeRVg=\r\nx-amz-request-id: ZE5B5PAK5HX5ZQRG\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 08:38:38 GMT\r\nETag: \"0f4cce1cc723e9f925010640e9160383\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5\r\nx-amz-meta-s3b-last-modified: 20230915T060118Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 107843\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":107843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1082x1500, components 3","md5":"0f4cce1cc723e9f925010640e9160383","sha1":"26061d213f8afae16359eae39d295f69758aa915","sha256":"9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5","sha512":"985da409670855669c845a9f36826cdcf2d6f2762cedfe49f907d6e77fa4e728da769069143411ad59dd98428f8082e391d9c473b50d3efef73adf76c82d1e05","ssdeep":"1536:U2R6KEPTEqfuefyBue/Ja4VCT1AXZyWGOsvv+9TPany3/2pzM1UoR/R0cNRz4mTE:vME5BuqAN4Zlcw/UUx/RRNSmT8rb","tlshash":"53b312f92c292e8bf94ad2fd28f213024245e5b8050f35f84ca45615c6cfebc9f62936","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:56.070988Z","times_seen":2392,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":724,"dns":0,"connect":0,"send":0,"wait":113,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B07DWPTLJR/514KL6gAvYL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B07DWPTLJR/514KL6gAvYL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sSCRsAnAsJjm3N5NI+SR4XN6r/BvtDI8fgdkB77wrg7CxzMI+PDrYc+maJ9HlIihFGdegpT24/8=\r\nx-amz-request-id: ZE5EZWBVSQ58RBRQ\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Tue, 21 May 2024 18:47:46 GMT\r\nETag: \"333bc9f8102abd9920062f747fd1aece\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 45252b2a7e6e7d31e4b51f95f215232c8cc5de8eb6d719a60ee4aa70022d8f70\r\nx-amz-meta-s3b-last-modified: 20230415T142418Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 30129\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 888x970, components 3","md5":"333bc9f8102abd9920062f747fd1aece","sha1":"e9e549efd4c0bff166582969196d4c48963d64c5","sha256":"45252b2a7e6e7d31e4b51f95f215232c8cc5de8eb6d719a60ee4aa70022d8f70","sha512":"c5b4682553f9430c4d889d864ea2c426e13264803531b8fe3781edadf67ef75dcb4b92a5f7b1e3f828cd768945dafb8746d7b0ca1fcaeefceb40a0fb2e16b600","ssdeep":"768:1rqMSN/4n00wwRelfNwPFdMOHhXhEM773zrWjYV0+aF16JO3j:sMSa0rwR6lwPFzhXhEgnrbVzaFkJ4j","tlshash":"fcd2e1b57b17c379e8b3217b8749638f9ed9cdb52126025f1149b9343c61d644cad8cc","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.453598Z","times_seen":7243,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":726,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right2.23d3e322.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right2.23d3e322.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6978\r\nvary: Accept-Encoding\r\netag: W/\"6978-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"23d3e322bf2a163abb5e4331580d3d7c","sha1":"dc9cc27e86b9ab385f24a1ebcacc102b8fee6d12","sha256":"e71173feb88bfac5f997753ceac015ca23f31f9f2234a8083be8a5a4d4e6bc20","sha512":"072c55f9d2a58fab3e13393b1f401d1302aa3269b405f85fdf99a86e9e8860bbc4182db36bf5acbfc6aaa9cf492dd69d194e70513d0f28b4fa287cf6b8b1d0d3","ssdeep":"192:E87ECyhHACQc4X2g7B0WiYHgv+YLX8RrI9GMftmR:fECKHACQcBg7BUYHgv/Qt","tlshash":"9ce19d5cef89ba61df29a13b062535093b23560a7fd297ff754c6c10e956c3056d8051","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-07-22T06:10:16.207192Z","times_seen":4674,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/f204d4bc-b984-45d8-b4c0-c64cd323a50b.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/f204d4bc-b984-45d8-b4c0-c64cd323a50b.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: r6kcQq//WpbsLjN7hS9g6oKtnQrjeLMFYZ99pqqLIdiwYaEZXYXRaAixtzBvMS8oFk28mV4yiroadet4UHgmuYxjAbMx/G+W\r\nx-amz-request-id: Y8MBP1B0CS3MEPGP\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:42 GMT\r\nETag: \"eb5830f9537ac75127130551276084ef\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96209\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 552x1500, components 3","md5":"eb5830f9537ac75127130551276084ef","sha1":"79cd82c86181ee69f0202b0817623ed0ddcd9753","sha256":"4c513da923d6affb6789d80dc2193fdec698edf2269ee75adcca490a8104b007","sha512":"267cc959d96d988a6ad817851bd3e5407e41bc18c4a8e8a46179bd78795059e6712136967e43df45ed73723bf5aaa0bbd1163bbf848ef613acb19d2705fbd3a1","ssdeep":"1536:vukkjh8CymhA1P3GeueP0JoPu2cJ6fMjnBMauEQohjoK/9kOLSDCkp:vdkdTIP3wvF9UOMau4OOLSBp","tlshash":"f493120be0874b5ef89f06b843592a17a6fb51dc294b0891f3b68dd08652a50dccf2e7","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.524061Z","times_seen":7056,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/0289f107-7fb4-4016-bf41-00405c76db55.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/0289f107-7fb4-4016-bf41-00405c76db55.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HVPOTAjlMSLQhAyD1FXzX+/5/569xHyB0tGhjJOX/Mvi5strSVp5wTYrO1AUmNmoju00hTxzAkU=\r\nx-amz-request-id: Y8M91EC4P8D7GGMW\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:29 GMT\r\nETag: \"5121c6c654da43d16cb203d4103181c2\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 118530\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":118530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3","md5":"5121c6c654da43d16cb203d4103181c2","sha1":"c7ed8e39d4ca57488ff21a40bfc82b068ec54604","sha256":"daf812c394f5200d1785c3f11f06f0ad0b804f44d0dfa5ff22ee173a7876af30","sha512":"f5e5f1138d0fdbf2cec1e2d24cd2db0d7803c6b0ab705f0a6eef97bfd982265aa7539f93849fdb78dd9204b147cb48f39bb9a27f1dd362afc5486d4869080542","ssdeep":"3072:ftP8FyN5Ff0bW6B7+Xzvjb/8sT1sjySOBS4:ft5Bp69A7z8sTKjFOA4","tlshash":"10c39d139906db97a41d86e4be071da82f076319e8c67dee11620e8f3e257339dde02d","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.43621Z","times_seen":6961,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-91f4e7e8.054674a3.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-91f4e7e8.054674a3.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"4173-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4173), with no line terminators","md5":"d26838e6fc6c5713d841649b06a47e9c","sha1":"7681e0887d8b3957920c84e07fe95a1f8a22bca7","sha256":"5d0e36aa6715f146ee4979217b130ba8e86c334c02758895220835a2366d5a01","sha512":"d01fe57c48c7685b7f14f29a50d61418040c66ed4c756276c25108e74dde577d4c79841b9d3690f94799cb30a1ea691dba49e71870b97018d2d57291026f90d3","ssdeep":"48:jMxKHcoeYHjMBgquTy/ra6oYkAryBxzYpUfRmua+IzvtTm5rx2/6iYrxXfZsfZyK:CKHco56gNTwm+yNfZsfZyZZK+8p5","tlshash":"cd81ee91712c94266c73e07b309e455e6e54ef63c012a3589c56bf3e8c932e32e707c9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-05T08:23:29.931375Z","times_seen":5300,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5iA15h2mj9EnZ+I12Bb2yqKcRFxTB4MAeOPLM1yylk+yWaU1El0/1o4LTwN1mgwWOfKYq/N12Z/voKYfuGxITRq4RhHRSI67\r\nx-amz-request-id: X23AKZ9DZ2KNVY2H\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"87706f749b341f09c0d4f313a08fc43e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 29992\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-23T06:19:40.775237Z","times_seen":9929,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":801,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-813bed94.d707c039.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-813bed94.d707c039.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"16494-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16494), with no line terminators","md5":"fd9a7373e233c9613e9c41c0a82eb6ff","sha1":"105e92131aa0eeb1479ebb736fe782a17cee53c2","sha256":"6e20baf60a9c8d6b45bf8037728d0f5ff68eaaeda4329409b0852110d8c78a10","sha512":"d027d3af256ca7678b85a9b211b362909207191fe483e8371255a1a116f4a1e6a9dc3959eeb1d3c1f3376e980876c5ff925af9712aa375a9ad95186223c7d502","ssdeep":"384:Ox2E4f6m/3oAgAWyCDXE4f6m/3oAgAWyC3sncjUdG:Ox2E4fLALAGE4fLALAYsncv","tlshash":"d2720af1fa30813eac5665a66185cddebc4cb109a1f247a6eec1ba35d0c66e3177c24c","first_seen":"2024-05-04T04:46:06Z","last_seen":"2026-06-03T23:39:34.633749Z","times_seen":1277,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-b44cb87e.c2dcd608.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-b44cb87e.c2dcd608.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"2488-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2488), with no line terminators","md5":"9ebedcfc17a77b41d085ff02d0952558","sha1":"f39aac6f7d5ffc15f477869d236b83dcc918b246","sha256":"9970c1349a172ee68d88499d6ba1958041287a8c892b4ae22fecdd7ad0dcee44","sha512":"169970d3921a730c2da73e67d31fd65ad46d14cd94097e8bbb255ab67872d5f3ae46a6003faae02f6495ffe1a2105bedd32d4881215e8acc4b1755063d401c4f","ssdeep":"","tlshash":"8d514b7922980a3497feeb2d944377a73003fd57e40250cf7868cb1e8cc9b9251e2768","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T01:22:22.5903Z","times_seen":4742,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-ec5b203e.45f75ffc.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-ec5b203e.45f75ffc.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"4759-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4759), with no line terminators","md5":"50b67c1e36297b1843f24dadece451cb","sha1":"aab4395d6d74d3e50d7016a544f7709a601343a2","sha256":"6310619d584f66c72ad89a3e491fcd0100f459bbb6c9d49d92843f464fcf51d5","sha512":"4dfc42a95a7a19d045ca233519f6f1c6fbd5446b344a059b1a5f691e916a5191b0121a7ba61619722cb7989a175982917bdf4e6359cfa4920d9f1e4b3ae2f29b","ssdeep":"96:2oxsUQOwXVcjglPJiA8J+eCkGCaCR4CRjpClCucCOCTpCHC9C3C9CtACbCUCtCcJ:2oxsUQOwXVcjQPJiA80eCkGCaCqCTClX","tlshash":"35a11297311f133d68b7e1571981a86d7878efc2c1322211fc27aa18c8db6977a3724d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.336196Z","times_seen":5412,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-fe46833a.f2bd8913.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-fe46833a.f2bd8913.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 731\r\netag: W/\"731-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (731), with no line terminators","md5":"04fddaebcf220f89065a61a8972e9ff6","sha1":"a72aaad63f69552c1bfc2ce529d0934877a151a5","sha256":"fde628e3bf1d28a032a27b15fb82ee652f593c2de925664d244ef73294ca3002","sha512":"91283184ba4be03fc8613a4cb7476f38560ea9ce179e380e14c783b1dbd2a7b001596670057aca7a28aa80f63ff390a69ddada5e8730d7ec4ab353382952985b","ssdeep":"","tlshash":"b30128f3d1100422c1f7e617e1826898ff95ccb2e753c0afad92551d82caad70ba7b15","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.35256Z","times_seen":8466,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-2d216070.9124b10d.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-2d216070.9124b10d.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 371\r\netag: W/\"371-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (371), with no line terminators","md5":"ce40f2a4193b5a30d49a76661a6d491c","sha1":"f5e483725aa903c2bf3fe7e985998b406958f839","sha256":"ecd84f0f9a121543ac8a9c2f6aa7d4b3c31b885f21bb43632635321634c792cb","sha512":"526f58b1ea3a88bec71d67882310989b8f4e6534b2018c8fc699239a2da7ccccd94c14b79e136e85e9f0b8118b542b4d00a8cc1cf969ef5c3e552a80048b72dd","ssdeep":"","tlshash":"10e0c0782063bebd536c30cf237f5993c45b1c090ed754e51ed0d49a623651f4224b99","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.646954Z","times_seen":3778,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-4007d5e3.c1afa8a8.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-4007d5e3.c1afa8a8.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"18181-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18181,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18149), with no line terminators","md5":"a52f2276511c6fbca34027ae0c8f2522","sha1":"8869c556d4238de97a0268af336dd45e8e075efa","sha256":"aeccc7e65fc3037aaaee3670ee3b7f826edb1c8aaf32190e9e83018a64be0fe1","sha512":"a96b8306a8cce1e6171cc2a9d5320f7678113e199aadc98a8f5ca61cc4db81ab077edf7252f28312f18e481de096d6108561f76376ebf5499e86457df7e45dc7","ssdeep":"192:l/OwDwYwBvpMXmj+YtcjE3Y7nG95lr5/JaL97fGUlni+3I5qTRiA63Jg18z3Jn5z:lWU3wFImipjWjja5XioIYRiA63Jg1811","tlshash":"e782a68ba651b45f0e6772a2309b2403a15862a43c0c9d56f27dc9f637bcc782b17b7d","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.531362Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-574f8736.17e73482.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-574f8736.17e73482.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6662-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6662,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6560), with no line terminators","md5":"6827f8cbcee001e0b5387c9acd526284","sha1":"dff077126ee70906ddfc2eb89b479d0daacb9c0f","sha256":"04607b26777138d40de946359b4d4cb887950f6bf623de5230d697194637e1d2","sha512":"fa8f3dcf3984c613461c8d0748a1a381ae3c01b8b7955c6e149c56d2b75b3235e56f28dbef8ac6d8ccd7601e6cab0bcc8d9c4bdbe94683a4d06885bf3335c23a","ssdeep":"96:toVtr/FXo3c1tx+9eXygLnWpcqkIGm6ZriCvWRZr/JGbmA:KBo3go9otWj5KOHGf","tlshash":"3cd1c8156247f55d0d6786a0304a3520b0683f98640da49abbb4dff976e4c18337efbe","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.517282Z","times_seen":3400,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-ff2fdb80.d40cf9e6.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:54.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-ff2fdb80.d40cf9e6.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6600-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-07-22T06:11:18.43744Z","times_seen":5421,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-dcbc024c.b4863f7d.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:54.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-dcbc024c.b4863f7d.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"26857-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26857,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26837), with no line terminators","md5":"9f0691e73ae6889f051afc50833894a9","sha1":"9153602f9567d94ae3ee172cdfe5a15a6df7514f","sha256":"b7adc11515247bbe6a3109344b5c9f3b96b2ed1f3f98a402ff93a2c45c54d7a8","sha512":"722f1423b6347db21b697d2dfbeab3a11ab890c43e01cc274b16afc1112a7b841356ddce56f53dc660a15d932f686fd335bc7785f2c4ae6c5dfcc85529dc3e7f","ssdeep":"384:LgsnVXOdCkJoHcsJ0UBlDKalA4NMrh+/QeOYaWvzghY/Jz:VedtsJdBlDCU/eY+Y/t","tlshash":"90c22a47a4d1a87d8b937159341f2198e6762fc5d045cca6b63cd8f9e2bae30231b72c","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.452522Z","times_seen":771,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-6699a1ea.bdffbdcc.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-6699a1ea.bdffbdcc.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3692-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3692,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3688), with no line terminators","md5":"d9246805257caee7e56e58d586fde1ec","sha1":"7deab1aee796fdfb9f2c5036b31ea84ab59d6833","sha256":"d1bd04564b0c20c35f152289163336e5fd697a6cd7409c5ca56d5aadbf9ab480","sha512":"669eb7e4b821ad5992d5db949dacf9077608eda8917608a2f4d56e8374fcf7c26fa0f66b664ea013e340ac2ecc7c7773dca0af803cdb97b14d8ecb440ce7ebe8","ssdeep":"","tlshash":"f3715546412179ed8bb9115231a86024f1f109dc680dac92eebcecf963e487c6b6d3fd","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.6421Z","times_seen":2860,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-b44cb87e.ed1c3227.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-b44cb87e.ed1c3227.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3101-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3095), with no line terminators","md5":"a31a0f3e04a66c5fa2993a8d2fed681a","sha1":"bb756bfd49c28b9dc42e5b662a279bf8dbd33f08","sha256":"bd29963aa6cfeafab21ebf1df3a38d3e075c0fc16cc0fdb2a078325d509d9ccc","sha512":"e217818892e47de07f577a934d8d3bce9f85d1d3aff776f1844e00ef30c79485907105e9f05e15e95f19f02d7a532cf2603788a9731d46652d5185bfc22f3c43","ssdeep":"","tlshash":"8351325e5463f4beca9e5026315db230a0313fe28845a4bebb74cd999298d61330f3b9","first_seen":"2024-05-31T07:14:58Z","last_seen":"2026-06-03T23:39:34.626596Z","times_seen":2594,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/1fe3d3fd-05fc-4b1d-a8fc-364e9d33fcc4.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/1fe3d3fd-05fc-4b1d-a8fc-364e9d33fcc4.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6cIdof6D6nkXU3FpPnrOx+Z6/gaHSLrFTuh/ZzE+TZ31fqxfry6Ae2djTBmHSAwTr09g5QQtzXY=\r\nx-amz-request-id: X232NAWX3CV46XW2\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:35 GMT\r\nETag: \"ccff69006dcd3e1ecc8e139bfe9c5a9c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 12326\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1060x507, components 3","md5":"ccff69006dcd3e1ecc8e139bfe9c5a9c","sha1":"723f319128c6d63041259ce5725aaf670ef7f890","sha256":"d3e206d3a678978521738381d06e6fdd5e0371d55a6429cbf8f526c66cde11aa","sha512":"67a316dfe938235480a09e76e0bc23d4555ac73edafa80ad8ba860e9f4dbaf96cbbad1c4d5df1316ed77be2e41e943f336e9e1815bd2f7c834e6d64fd87358e8","ssdeep":"384:1K1hYtA+jmAI17ZItgLQWG1y5p/RDp8Wq:1tDjG9LXGstDaWq","tlshash":"e142ae55ed8640e4c938bff4463b42245a1aee3cafb0b1d60b964ca7ea126401f4ddbd","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.488244Z","times_seen":7699,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":207,"dns":5,"connect":95,"send":0,"wait":121,"receive":1,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/e06b455c-8412-4866-b1b3-653027bd1c10.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/e06b455c-8412-4866-b1b3-653027bd1c10.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MgVqn/VBkezzqkZ1xpCS0hvZ14zD4aGIUBJw+1nhuC8DpnaUe3DMkTknomK88yY90gf0IrXW3ik=\r\nx-amz-request-id: X238ZYTSH2WJFYPW\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:36 GMT\r\nETag: \"c204487a7d3a52dd08d0cb8bd82d4383\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116417\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"c204487a7d3a52dd08d0cb8bd82d4383","sha1":"0d1d0939727c3ce06382233272c124b3e0d023e8","sha256":"522ae93f5824674a9d56c6bd1e7973d5b98b171fbf00cd8e36369a842d416b6e","sha512":"c22785e439d2531161a142ac57571ad5d611562164b20454af4dd5e655c0e36b33d7e3331f77d5d9a7261a70ca92b3f1d5f34bd11eda38aebb5b0af30b1716b4","ssdeep":"1536:Vs2stZYxtS5hzAjXqCSe9lMKHKoyqBxglgPqUN0OWw2axsLUUNIBorXcQxs8ASz1:q2ssmhWXqCSclqoJvOTw2fLTN0EX08VT","tlshash":"8db312936325991bc7ed04734ab352bc6f719903775c5324bb01a42e59399c8ecccb5e","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.491589Z","times_seen":7450,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":116,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B083TRDV5R/51n3W0JxmfL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B083TRDV5R/51n3W0JxmfL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +lXbpqv7XpmxIJFHfC4uJ0Um0cPhS030UC4AsoLAqQuPlQOQno8BeR0YITz84WpN4xvaVh4WUZ4=\r\nx-amz-request-id: X23C85KE9ZBR2KC3\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Tue, 21 May 2024 20:30:08 GMT\r\nETag: \"024f3ba30a6e5258147db3fc66755883\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 25549193484395a6960481470b9eb8284a667b3fa147a766f9e725717aba24f3\r\nx-amz-meta-s3b-last-modified: 20230415T142456Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 60364\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":60364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 914x1500, components 3","md5":"024f3ba30a6e5258147db3fc66755883","sha1":"37d404ba13429e44bcba4d4a9a49aba6215e93b9","sha256":"25549193484395a6960481470b9eb8284a667b3fa147a766f9e725717aba24f3","sha512":"b02ed30d00443ac85d31bb467ee41c6efd3d395fd164a84b37ad5d9f4837a2415b2f9d04935d31665231dc776ee72aed285a73d16b0260957b5ef19d3928c905","ssdeep":"768:1R7PirN6neLXjYLRvqhOJdGEN9J+RhC0VRAs7BROG/bQXj9sNNIyMtSp7JN0/hcz:jrQtL4shcdG6JUC0P7rBbUSN6ggY+8","tlshash":"c643f29707a7489ac8f4343a5e12e1d4dd58ee5b259b6fca78f06f4d33060c326b0297","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.451591Z","times_seen":7470,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":508,"dns":0,"connect":0,"send":0,"wait":119,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-3805cfd3.85ee17e2.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-3805cfd3.85ee17e2.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 410\r\netag: W/\"410-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410), with no line terminators","md5":"fc805b781c89c799b666c4fbc4aeb200","sha1":"fd06224fae1c2c2bde5a18ae89ad003e03d5fef3","sha256":"a69b97003c8dfe86e112829516ab7dd637a12b08508d6cb9049741ea93868576","sha512":"2c06b84040f5df4f5486d754fa36dc5acfd67741c94e929f9c94994c1e7e71898c1fb336dc6be4e8568c2bd0c449b0e34e8f392cee6452d08874382a90856bf6","ssdeep":"","tlshash":"09e0a942010a1e2b2563f42ad0820707b665fb37eb42d2409ee00a080f9b30a38383e6","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.364867Z","times_seen":6986,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/c801d8c1-e6a6-45ed-b224-7f662cfe8c7f.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-21/c801d8c1-e6a6-45ed-b224-7f662cfe8c7f.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QSc07LMpIOe7dvGsz81f8XV85bpRuZYP4hfIvB34irAyvpOrk++aV/cKIVSywRHsmtn4Pn3X9lo=\r\nx-amz-request-id: JPZZA7Z7YRB21HSK\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"98adea8cd9a93873e272facab36ce8bd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 225836\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":225836,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1061, components 3","md5":"98adea8cd9a93873e272facab36ce8bd","sha1":"48dd6521b7244afb7a1777e110f50c3287dc4e9d","sha256":"90293c3926eafe78520d7bc77c4a7b6072405aa6bd3b04cea1bd0ad6cbe8b9ad","sha512":"653cc424fb3d413a6ad8a57855dd3d3871bad57032375ec11555bd8b2093bbf991322194c603b39951cce346945af2f44abe1374dd7c801ef707165f8ef621ff","ssdeep":"6144:7Ki0PNHJt4iiIyC/oB44/OXdXKUUn7qEoMQ:7sPftriAg4cCdX1i+N","tlshash":"80242371cefe1e8dcdaf1935d68a13c36e075d61a9a13b80cc66616469f10b33db098a","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-05-17T03:11:11.631012Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":117,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HUdMpqvtS1TbjC9/NKJWotjLbFoT5yWPseH5PGdlAE8PTAEMcFOgmmgeHc5vl/35HtR2sLzaqt8=\r\nx-amz-request-id: Y8M2T5Q5QPA08CNV\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:02 GMT\r\nETag: \"8c00ff5e70d17f3ad0a9b1b85f0ca0d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41631\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41631,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 647x1500, components 3","md5":"8c00ff5e70d17f3ad0a9b1b85f0ca0d1","sha1":"821b82e6b725f4a90aa36d51efc1a362e33b53cf","sha256":"41d72946e6b8fde800f2bb6b1ce9f6be2b286f437f1abdd23595a144bd5d1427","sha512":"7bbf0279cc137f96fd2c7a6976af80334de90ceda385bdd26da2215dc52f96f5fee9a68428c5883c7a2bf21755b6c01597c8aa9e40e971de13d550c31027793e","ssdeep":"768:1qE70EERqK41pSmdbAENaZKhNwJ/qdLbSY11ip73BTkEyF06n:770FNGQcbrMZGgCdVip73wB","tlshash":"f813f11b3b62a61ed1dbad36d45b72018ce0fb1b33c1848f6e62346135c6fd40b97695","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-21T20:31:55.963083Z","times_seen":2346,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-7809be7c.badabe5f.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-7809be7c.badabe5f.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6412-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6412), with no line terminators","md5":"0633ee4661855b6bbe621c11916c84cc","sha1":"4c0a2a81e69522697b1cbaa7338158639c4aa12c","sha256":"fac6b26cf761221c13291fbb469530d8d6caecfc22f09faa1a9e562bf15ad127","sha512":"b2441da78e3cf4a5c847805eac6921d852bd2f17db15b012485357a438eb0d41d84c853e8ca0784803fefd8a7315d0426b19bc78f310cb23ca2a9818fa232830","ssdeep":"96:+jWBPlmQKmYqqxrnY1vfqQrFvniDypkpNhD93JlyIqdUPY8:+jGPlmQKd1b8vfqQZiepkpNhh+IqdUg8","tlshash":"90d161b2b5b5426a7d3fe3b822d4e4ac75049551e8629be6fed4d028cbc2ff35410b08","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.50503Z","times_seen":5236,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-7bbab158.e4b86363.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-7bbab158.e4b86363.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"12150-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12150), with no line terminators","md5":"9eb675eebcc2689f77f1dce674ac3eda","sha1":"07f2c04d4bd557715ff7fcf8f16c0fd8ef105f34","sha256":"1bab744e48b532a4fb99f65dae12c7774400bb5c11906c6a10d70a6e57582849","sha512":"f232b8d195723e71a91d186deb341ee5a236a98b81830d0f4b3737b5690a509d12795a31d89747f3acddb0e288f5068d433883ef8ebd2ea362e8114b9503e394","ssdeep":"192:IzEOxr768X/3oFyngdSWLPIk8PK3fOxoi7k2Xer4f412QRAelWklFbaiWsAXU:iE4f6m/3oAgAWyC3Wxoi7kGeriscKYtq","tlshash":"4d42d87295728739ad27f2d57068a8f87844c126dd5343edb6a07538ccca6e72272f4c","first_seen":"2024-05-04T04:46:06Z","last_seen":"2026-06-03T23:39:34.534722Z","times_seen":1435,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-09-27/de5825e3-c72f-4186-9503-2b6b89af399a.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-09-27/de5825e3-c72f-4186-9503-2b6b89af399a.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vxHzZbnnbNJnhmprHHR6Qh512rr0mXSSmgRtRA+quvN+VSd1eZqnHT2oPl0bvT/2Xo56B2D0gRXg7Gw0vLiDufTAHJYwzbx/\r\nx-amz-request-id: X234J9N033X9S39C\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"fe338c9b5d010848cb21a1db76fadf7e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 227074\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":227074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"fe338c9b5d010848cb21a1db76fadf7e","sha1":"45eb4551bb82a4993dbc63c4bbc236b89b52fe61","sha256":"eac06e949524de896c14555b703c2a7c6e63c573083b7544a336f8c027fdde81","sha512":"e12280cde3ef9eb88c6ce4af8447dd342bfda378d30776541085a725f5624aef98c048e18e724f704b821de16afd3ff424fc4ad6649908c6885410f616111936","ssdeep":"6144:vIwTgSDMGq8hLz6R+CxH/SNXquhJbgcqnHNo3mznP8:gfSQGq8hO5/EDhZa23mD8","tlshash":"582422ae161261137fd59cb23cd193ac335797989d8dc1deeec305603eb802794eb886","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-16T09:25:40.636626Z","times_seen":5147,"resource_available":false,"data":null}},"time_used":1470,"timings":{"blocked":525,"dns":25,"connect":92,"send":0,"wait":135,"receive":283,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BFrnIR29O81YYEzbMn34y2O5lHGUKOEd/6ZXh/um7bSHlO4AX4F3rNqjSQPlxy8YJCeOXAILCQAB2e9yQ9bVNV1HHB0NYeXV\r\nx-amz-request-id: X2300395VK6HXA41\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"3cadf1789eb8f8d80a12e5ad0e19ea67\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26582\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.701472Z","times_seen":9898,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Uxox57hn5JwGZcc9ydHfuYcgAehI2gOgkLYfv+R0d/J04TEE5cQKQme50Z3FWxRS9BujLu1YRELgaBTyYv06mlfK7IIli4fe\r\nx-amz-request-id: ZE5AGQNN3R96RJGT\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"1e463b0bfc58cbe93de38ad62f2ac7ee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 21173\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-23T06:19:40.797632Z","times_seen":9472,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":114,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/5b2e7318-d3dc-4133-9cdd-a3e8bd8dc152.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/5b2e7318-d3dc-4133-9cdd-a3e8bd8dc152.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: J9tZKqDUw9lrdCv2B+9OdXyIMIYW5M/1SEKlMnnMDXa2Kl8JdXA+bUT0YxKfNaCfv2iHnPWYD0aVGQtOB4ZWUr07IKRbC2Ga\r\nx-amz-request-id: ZE56RKFCGMSQW5E3\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:28 GMT\r\nETag: \"5221395ee29242605dd924706d012aea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 169277\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":169277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"5221395ee29242605dd924706d012aea","sha1":"b5c84a3be7b040a8bf20336a09f01ce3d5da1910","sha256":"fae9f02ada935d525035e324b5903d79ee5309649f5f960cdae175afc4b53331","sha512":"1ab8304fd377e4d5b80dbe1f012e9487909f3b2ffa5a93dc9737a5f9efede99a7a8bfea0ed77b5f68ec50f4331225384158cf9111962d6ab725c3713d4998104","ssdeep":"3072:ynvPz7lidPtJWsDWW9EHbiULa6gZ5rqLAwRc2zhSKjFBKLn+AYmF9x:oPvl2PtQiWNH2eQYAwRVnBK7+AYK","tlshash":"77f312c84c01dd7f9e0a1d14cfa31c32d1ac4716d51842839129bebe86da6fa7fd963a","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.43552Z","times_seen":6414,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":1037,"dns":0,"connect":0,"send":0,"wait":135,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7izb8QEk4aE5UPVvdNVtMO7EsEv5c4xWn+v21a+w+WxMokJkcw8jVAW5fD/p8sa/It7QeoN32J0=\r\nx-amz-request-id: ZE52TF9XMQNHGFXE\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 02:59:56 GMT\r\nETag: \"63e2fd337fbf2929ce3fe246e90ba31a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c\r\nx-amz-meta-s3b-last-modified: 20231026T124629Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 75594\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x687, components 3","md5":"63e2fd337fbf2929ce3fe246e90ba31a","sha1":"bf2750fce56ef9ad51e4a5d8a50abdc336c058c3","sha256":"2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c","sha512":"64a18a9024eba918294bf2bc6d7ba454fe08f1f1ce6dccf2b30f08dc6d2b0a81eb96f47bfbf99e0a74c50180b9c4b0ed4d657a38da176ba2106c81b49b808e01","ssdeep":"1536:Ub+La/D2TkPb7Jg4T9L9KLKTs2ZWvPA8UJIIZcbV2JUwgrDx1Gxz0:FW20Sgsys2YI87jMJUt1+o","tlshash":"867302b3fbb063b5d52498b121054e29bf939a38f8c09ab3a962873734e4ecc58c5595","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:56.038507Z","times_seen":2251,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":661,"dns":0,"connect":0,"send":0,"wait":111,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/banner_01.0c05748f.png","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/banner_01.0c05748f.png HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 90989\r\nvary: Accept-Encoding\r\netag: W/\"90989-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"0c05748f8a2b23917ece3f112fb1b746","sha1":"6541989f240ef356100b54720ccc6dcb193413a3","sha256":"9d267b14f1c910da486ebe151762d6fb7fa5bcfb509637147cf931077b98cc85","sha512":"1f7791c2fbc4667bf5aea034663189aa870bb1638403a302f007846b9fadee40cccdfae2b2ac7ba1efdf35fa816bc4ed88f4b836fb7ecdc26f0b5813cd0ba76b","ssdeep":"1536:jCEay9acPt0FHwaq6lc4s05lQy3ZNAe5ZrL5IOvg6R5Pp1+U6Nh6LVsKr8y+hbie:eEfe9Scc4s0XvieLX5i6fPp8vhYsKgyQ","tlshash":"2c93128bb275d84ff61f6e104e912939b355da9223d1c71f8a182b34385584d643efcb","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-07-19T16:24:13.426116Z","times_seen":1373,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":521,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Sjcjf17O5n6q4XBucA9cqgDchkcXEUcoK4YvXamWqQ51FDQCuoR57nGY7f8ACr2sOMWpBlCzscQ=\r\nx-amz-request-id: Y8MCVH5G5H2YCPAP\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:54 GMT\r\nETag: \"07f95e174804bff3d97c5b13f915cf7d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 157447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":157447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1261x1459, components 3","md5":"07f95e174804bff3d97c5b13f915cf7d","sha1":"fd90a34dd34b37bf7d1c3f62c563c35d2ac8b82a","sha256":"872dcd22912f0f77f949b0642a505d3955f616d070da19c652f4312243eee5c4","sha512":"33010f75dbb816564d931260fb29a588407a9367f82140ccc3bfc33472a049cc8015a5a955832192affe139118dae18a3d5d2a4395227feb2cb0223b7dbc705d","ssdeep":"3072:UUwHcs93dkA8nkSsanKc4hUm1wyHhJ0qmz2WBJBrDymn8hKB1HoT:hs9tkXbsanKJOqCq85D58MB1IT","tlshash":"a0f312537850ac65dd7a4332a3266918bcc0e364dcbdc988417b9d4b87a811b6dbfbcc","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-21T20:31:55.974433Z","times_seen":2458,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-637414aa.c67f7842.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-637414aa.c67f7842.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1966-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1966), with no line terminators","md5":"b392d111326094fde89233745e35305c","sha1":"6cfd33a21fd46b68dbca97360265c9ad85c27050","sha256":"bd8cbb3e8f8ff09d693d74330ea73ec6d5b16692790eb8fcca8894095f0925c7","sha512":"1a69336fecc71de19b823feaac4f937f23f81cca5967d360699b33dc5bfb8e5f38bdef99deee78c878c2f3c49934fa06598da13cb812cb93016c7ec4c7842b28","ssdeep":"","tlshash":"964185df54a7fcad97dbb04210291035b0623ec6444a8ca57bf4ce6085d4d545f1e69f","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.564704Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-04d0d3d4.76c2e63a.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-04d0d3d4.76c2e63a.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"2912-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2912), with no line terminators","md5":"6ab47385095df2242c44f4bc5e537676","sha1":"cd18351a53d6cc1da603b83493fd5cbc1b9bd4eb","sha256":"19bee7784687ded0a20e58c3ef6dcce9b1dd8d225007b4c4dc93f99ce0679f7a","sha512":"77e4f3ea909341ad0755bd5518a236c4205ccaed7c0b4b70313cd428506f5e837cb5d5efebaf939168b30d9a0e00fe684feb3f1a2b1c9e2f6a612420444092e2","ssdeep":"","tlshash":"fe5124503d2c7c1b94bbf468f5c0dfa83ba0a927d353d22a9a57fc059c879c23129a49","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-05T08:23:29.875231Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/2c9882e2-5834-48ac-9326-2fcb50e3f03d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/2c9882e2-5834-48ac-9326-2fcb50e3f03d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HfOYsSXtt6nQwJkvoYzJo1EQLKRzYmVaiCuZT4vib6FGd63RywpgsXyicPg9++iMHgKZoZaoz1I=\r\nx-amz-request-id: ZE545NPA3399FNTJ\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:03 GMT\r\nETag: \"e20b3cf0277fa3099d6972dd28d24abc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 15607\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 802x521, components 3","md5":"e20b3cf0277fa3099d6972dd28d24abc","sha1":"84d0691dcf51b356061d534f15b0d525a74ca14d","sha256":"4c7f74a7416671cabecb63179e3ccffca56fa748572c201b258b4a386b56c27d","sha512":"4b46eef72d81a1487e47a8424dba9e855df286ebb4841e4fdfb5208b65c2483a3f3a148e529b1711aba34da55d3493c4292f2b4b40b050ff9f8130d40cba6f97","ssdeep":"384:1o70easHMM6iAWmDWgBefzTEtnnRo8sKNdyqbAafK:1o7aHdWmDWmyvya1kA6K","tlshash":"7062ce521a0f3984e86d297e452f27b04b679ee3f12f0c91307ac112d2e49e0ad9e0fd","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-06-11T23:31:05.332006Z","times_seen":2298,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":751,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f7afcb31-8430-46eb-9114-c2bacf56fc71.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f7afcb31-8430-46eb-9114-c2bacf56fc71.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Xq2o/+rShI1y1Hkf+Vid1RE7SLk/Crb32YjPgCUVM+m6EnEodtsRBQmWWTUxtTdQx1KE4DwZkCQ=\r\nx-amz-request-id: ZE57R2DTZ2YAHCF3\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:26 GMT\r\nETag: \"4c85719fadd1dd49d50764ebb37f8bf4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41611\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 724x889, components 3","md5":"4c85719fadd1dd49d50764ebb37f8bf4","sha1":"202bd373f578df56177fa741f81f7961a7d0a9d6","sha256":"ee62d20d0f0ec21165f8f72ccdcae8656724084b83fb33275674a13ab9d9c283","sha512":"5226eaff0fba868be39aad762b79a4354cb46e4c839a841e5dac176ab4daeacef5dfdd0449a9f0c8b5294d64033bfb6048d635ca4e2f5c231588def6bca34a9e","ssdeep":"768:1CSqOAnN5XScHDhNwdErLTQCBLnVh0xiS/aNBFx2yggiujl+fhBQUkypJ:gvOQ5XSYDDUe3QCxVg9y3F1Xiwl+fhBF","tlshash":"8913f064273d5020c5c106be425bb6cc1fe5017dabf789423ae45cbfe469f92aca1887","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.497754Z","times_seen":7370,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":810,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147042,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8ce26437532f50cc07335fdd430133c","sha1":"c883032ce8aae825c18537bffcd0021d6acb9a66","sha256":"30252e460309b47b42d267d404cef0df2c9be14b08938fa01c02c7c77bbb2fe8","sha512":"d6ea38ab194e79a9552478519970a37ff996b31a1fede5cf7b670b3944fd9ba477c0fa931ce71a019ddf702840f5017a527ce4db17f841f976febd36ae88902e","ssdeep":"3072:DSYuwd+gEj1fOU4Z74aZHob7/Hr7ECwPus4ZdubRsR7QYEq:gCM7487ySrluq","tlshash":"0de3e842d7a8d26a1e28015544227eae94fdd217dfb34f88ed2cde34af98cf6761904c","first_seen":"2026-05-17T03:11:11.666589Z","last_seen":"2026-05-17T03:11:11.666589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-6f60fb4c.f9bcf067.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-6f60fb4c.f9bcf067.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1392-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1392), with no line terminators","md5":"41c67fa3f160511f0b6420ea29fcbdb4","sha1":"9b8d98551a5dcec008c09d87826c916b09e224ae","sha256":"a03ab3c0316b4322a65858548a8de7ea17321faa4c6b6d1ffc0b92e4a04c7acd","sha512":"282d17a7d4aaa4867dfefe616039a44980bbc65d674f2f5b7284c697f659ae7ed7f39aaa0ad8645096ffd6bf970827fd385bd902e561872cffc19deadd5f7d31","ssdeep":"","tlshash":"9621f7f66536926920bb702778a040e1b8acfffb54b2e2856e8f644dc476f412f33044","first_seen":"2024-02-11T18:17:20Z","last_seen":"2026-06-05T08:23:29.966788Z","times_seen":5361,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-2d216994.706e13e0.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-2d216994.706e13e0.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 255\r\netag: W/\"255-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"e7949dc2de0878e849cf3715ca6be5bc","sha1":"9421c37479babb994e0a9ee0c7f0056202ebadb5","sha256":"2f91706fa1cba12f83256093aea5c62de8712ceb61a05d8e559b0b54d1b7af39","sha512":"22895c7a4eea5fc7446053efdcd741cf6d762b1cf018c3b498d7c43baec63a91e79c504eb7ee0b95afde46b8393803ce02f02eb0a1d9eb956719559dcbdef49d","ssdeep":"","tlshash":"6dd02ba6b0627ca6c55b3081026ba363342e245a0edc106517f146d42275a1e81159a9","first_seen":"2024-02-11T18:17:18Z","last_seen":"2026-06-03T23:39:34.573208Z","times_seen":4036,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-ec5b203e.6dab27c0.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-ec5b203e.6dab27c0.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"5317-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5317,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5315), with no line terminators","md5":"e467108151a0178efb3f1559b3b3d89a","sha1":"b24c5b324d0df9ff9122d55d374a36c2ba001347","sha256":"a698238692edf2dd0fdde9588a354d21a1282480e83276b1c4ed66f9035291b0","sha512":"46477ad6e85904d656b5d8e15be0b0040b54416affb71ec445ce3108ae4f656628d782ff3098b5a43af5765bc786167199ee413fad3d67d0faa864ec9670acaf","ssdeep":"48:lD58YPTP0B0j+WWWgSu0+u4jQAF2GB2N5YDWVET/KtLS1gRSpDzwZSkVxUiFN7Yt:VX+WGsSBkLSoLVYIZ3mmJwQPit8F4aM","tlshash":"7db1d889b043a06cc55bb422310e7a75f4a62fb4f401989ef33ddce49994d14772ebb9","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.556186Z","times_seen":2516,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-fe46833a.2b714c8c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-fe46833a.2b714c8c.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"4379-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4379), with no line terminators","md5":"7e5bd0a96a0f5cb5c5f263e0dd1758f4","sha1":"8f94e558a15d3eed2dbb568106854a284fdeac02","sha256":"f201f4c8389346cee307295c1a5aab5f8863324b37bb6dc4befa0bc9fe3d9f52","sha512":"f32f14310c6539f6a35122f4f8328f2ae8479f87bd3cb36bd6e57b73814209ebd041f4777f21a9f28acf8576380570c4cfe39db566f8056494ce942e27da59d6","ssdeep":"96:Jyzg3IIIIIIIIIIIIIIIOp9C4mV4r3jh504FTFnqpyeH:nIIIIIIIIIIIIIIIgfU4P9FIF","tlshash":"0a917402d5b2e775f726192f364863105e219fc897a5c4057bb06abb338187e073a688","first_seen":"2024-05-31T07:14:58Z","last_seen":"2026-06-03T23:39:34.49146Z","times_seen":1115,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wbgEo3v2GTwzrLzNpMLmJghzrBLpByjht6wJNmfAsc5r5nzJyZTpCI4WDaUxeTMZFzsIvpB32WXMQpMic8mp259DafUHVNp2\r\nx-amz-request-id: ZE5ATRJX0SWG8W70\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"a7d470fbe103fb9a6784c6e3bd450ccc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96012\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-23T06:19:40.718631Z","times_seen":9630,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":913,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right1.57c427fc.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right1.57c427fc.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4805\r\nvary: Accept-Encoding\r\netag: W/\"4805-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"57c427fca0d84bc0a092d9034deed77f","sha1":"e47ba5c89f052526d7eda2aad1a86336b3319aa8","sha256":"913d611036152ecabefb26e4ef79c198a2779ea1e5fca384f6a6b159d0babca6","sha512":"df3edf66df0741f19114843d93cea243ad98efb17a75f4a9d07f7ad80b006b110010eb0feb96f84f6ae57d9e5408096812fc528468f6a7b42c1ead3e8595d171","ssdeep":"96:WhC4SzAFMLFwDLyk6KPTLPwrAO824idlifhcL1qYIwEfRHNRXb9z:EJFMJiOklLLGvG83ELRXF","tlshash":"e3a18e4f67b66c5febba8bbc04184f942512dc1159321f7905a05c195d2fcfad9603d1","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-22T06:10:16.173444Z","times_seen":4652,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LvtGiJVp0627f0OBMO1f5pC8qGkQOYO11EtDF/r1H/YfYxotleukaqk4l1v1jStQnR+Eht910jc=\r\nx-amz-request-id: Y8MFYX70P8TJ10Z9\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:40 GMT\r\nETag: \"c5a47705795cdbc1e8729597ae3590c0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116736\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x890, components 3","md5":"c5a47705795cdbc1e8729597ae3590c0","sha1":"dc331981dd3aeb0e2ef49a5339b9de6fc874a6b1","sha256":"2c4fb62978884f281072fa2aac50acd32f422cd139a6e8c703c644263f3cfefe","sha512":"64b217eb462365a15e408992e9f6cafc4da3aeff8be47a4a0d9cf1eec22ae84b8c49db9e0bde58eeb4c3218d3503147fa72fb222e07dd10f09e08108934f491c","ssdeep":"3072:5e2yg9EXZZEXO06Ae3UYn/HFkdOQRC+p/o:ZyeEXmO06AuUYnNkkQRC+p/o","tlshash":"82b313ed627148c6e96c04b5587ec05c8a31138bb6d8af6f30fe1d221bcda512edf549","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-21T20:31:56.061378Z","times_seen":2410,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-377c362c.ad1b4093.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-377c362c.ad1b4093.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"10847-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10847,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10847), with no line terminators","md5":"548fe4c2459adb79e3e187c5f1a83eb7","sha1":"6e96f10ec8d71a6452665720f7ae7b7e9c97f329","sha256":"d945e3ceee2d60915ad508b625d847d96dd4c94b93fa9908fcefd9445a8d58a6","sha512":"086b4e028cb3bf6eb0dce60528a7cfa1cb0a514c47ab526f24bc2be5a47ab40bf392282b2fe2a9097c2c03b05a1523ae6f7e7f4916ecf7c5fa5d9805eb95883e","ssdeep":"192:pv/sODCMSXc6HqgCI9pn5VssexyVj+4ceYyifz+F:pXsAKXjk8XeU5+4ceYTfE","tlshash":"4322e60ab066e9b88d9b41123106a27471765fd5f40844edf7bcccb85689eb8332b37e","first_seen":"2024-07-18T04:46:30Z","last_seen":"2026-05-17T03:11:11.672797Z","times_seen":743,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/fonts/element-icons.535877f5.woff","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkktokshop.top/css/app.7301f093.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-23T07:21:52.373805Z","times_seen":26909,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-09-27/4ccad6d7-1ac4-4b71-91a2-7f303bae5eb3.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-09-27/4ccad6d7-1ac4-4b71-91a2-7f303bae5eb3.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lH0RLkELw1qItGC3rH1c6LWNygAchhKbTcfMLHHS8qbFYhiRMzP1Jh+1aTYLOplVBC9RV9wU3pf0ZBco+cp/LPGjAtfw4RLM\r\nx-amz-request-id: X233QFTC0TD1N76Q\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"5a8141a1e3f9ae20e358558f847715f5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 204466\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":204466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"5a8141a1e3f9ae20e358558f847715f5","sha1":"f7be50d3868c793818255a6094e78053690db2e9","sha256":"620a101a1e114bcc50bddbec1e1bbc157276a7d86918c943589c479e1f824d24","sha512":"bebc62defc949b0295bbc48717a43e974dab98b90383e568eea78e58a503791c8c87473af26443e43eaf9154bdf4e4fa0ab7ec18b37b6d289ea454b3ece93a54","ssdeep":"6144:6n2eIy8lDUjZw6TiGDMkl8T4Ax0DSOyYl:6n2CjZnRi4AxeXy2","tlshash":"b61423bdb2efcc1a21695ad1d4719b7ce7b85db0d448343803714296cdca53a6ff0928","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-07-16T09:25:40.664771Z","times_seen":5041,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":475,"dns":26,"connect":92,"send":0,"wait":124,"receive":283,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-09-27/fec070f0-ebcb-41bb-9d4e-b383ced7bf87.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-09-27/fec070f0-ebcb-41bb-9d4e-b383ced7bf87.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bPk69u3rXb0Slehlou2GQCXq+YJXx7x92HXWteulSDyWkNbBXDAQBLkQNi9faP/JGVbVXlyw7hxfhZyulCnEVMovMjA0zC/I\r\nx-amz-request-id: X236RWP0PP2KVMJR\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"9f38d77d904f502b512c9ec5b8ea5906\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 167342\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":167342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 314, 8-bit/color RGBA, non-interlaced","md5":"9f38d77d904f502b512c9ec5b8ea5906","sha1":"1bebdca8e525a4c016780265cf05ba2e0621f652","sha256":"7be1f4180d586218d352c2e46603c046fbacdf908313b987becca84e09bbcc2d","sha512":"cbbae2f0cee0235b23fdf99e7e006101c9a6d7001a5c43cd2aec059fe207ceb0b17a6f51754406e006a7d3b78221ac572aa3db6e2efa58c36a7f1baa466d305b","ssdeep":"3072:2zHXQyGpimL+GdP+1wNE2AneMrUhkhYEHuxS2Sd4EbgdNSoDejQT8:2zHgzc4+Cm2AeMXZ2SdFCmjD","tlshash":"92f323e5cb37e0a3826f6a210d5da645e507a04727113fea532a8f53c38d3d75687ec8","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-16T09:25:40.614992Z","times_seen":5414,"resource_available":false,"data":null}},"time_used":1319,"timings":{"blocked":498,"dns":27,"connect":93,"send":0,"wait":128,"receive":191,"ssl":375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/shopAvatar/2023-11-23/1e60a570-fd75-42c1-b3b9-3c040b0cc19e.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /shopAvatar/2023-11-23/1e60a570-fd75-42c1-b3b9-3c040b0cc19e.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /IYp0pKbNffAeJ6oz/K9dxqaUfl0+UK99ZRrgMBToq/Q4Um9+K7RZ1Pwpc/9QH+44h/jfWdKzvDCHapi45t03UW19NvjMoZ+\r\nx-amz-request-id: JPZX399HTWTA7RYM\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:32 GMT\r\nETag: \"3224e47c70fef9289898672d8fa26d2a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1521350\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1521350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 936 x 936, 8-bit/color RGBA, non-interlaced","md5":"d4ad8c8f28bbff0552707fa501cf07cf","sha1":"6dc1348a98aa7efc61489e2bc7f95cefb44f4a09","sha256":"a8c5a04357bad806ad855cef0f92ef998bfc2e0cd8a390818df436cf40d6efde","sha512":"9ca2c9b123ef136a260b5bc2a1a0a900a29e45034ea01184e89ddae6e0a302812fe0c74771958d398cc59a9ef13737429aa37297fbfdcde96293f608ad42d367","ssdeep":"24576:wp4vxIrg4fman4ZmBk2/MqGj9jKKxrijvB:wevxZ4frBkA2QKMB","tlshash":"75253315d425b107fbc79a75d98617833cfe1421b3abb04d0fe48a1af972e726898137","first_seen":"2025-07-28T06:58:14.003726Z","last_seen":"2026-07-21T20:31:56.039255Z","times_seen":422,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/3e25aaf9-50d2-4f5f-947b-4e440b685a95.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/3e25aaf9-50d2-4f5f-947b-4e440b685a95.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vDhWkHkGvh+HBjIDzAISeFbGMceb/XfFIUL01E77N9dWenJNEXIIvYMiZcOeS6kXlUHh3Cx9mvE=\r\nx-amz-request-id: Y8M87BN44VT3DPGV\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:41 GMT\r\nETag: \"35321efbba20476448ab4968f2c839fe\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 120128\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":120128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"35321efbba20476448ab4968f2c839fe","sha1":"83fe2761c569f528754a33a765321eece0353ae2","sha256":"7527a61b9948d7cd050a7d4168625cb179f796be363438ff508ac8207c8b82ce","sha512":"64601349241016579273317119155a21f41f30636eadf44ec18ac7b732d76548bc2006286f1544b5d0b41eebddae885247c7915c6690f5d3c708912fb6894b4e","ssdeep":"3072:yfGehjMNIsGKjnwE3lQTOyatfR9+Ei5ASzJdVGN9T8r:DI3KjnwglQT/wDY9SU","tlshash":"e2c3121fe6888ec6eb8f1f72c11355863f107ba864886e47029b3457bc6cabd5c3e901","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.49384Z","times_seen":6902,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-4a688b54.fdd54ac3.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-4a688b54.fdd54ac3.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"11662-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11662,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11620), with no line terminators","md5":"b3e9f47ce8baca55cdaa8f4df30a6f15","sha1":"46e33747e6e5d99a02bd07d07c26ddfaf9f306e1","sha256":"3df74cae778a7f8f20b83339fab5bdb5ea0948ecc936231c2e39cee0310f2f99","sha512":"7d392b3653ef39a5f39def871e81a8e094f9046c9e0158b0e6dae858f43ed20f8f60770442c3bed13c0719220bc9e4fadbcc48e3b1efc4b16134dbaa4d097954","ssdeep":"192:CBo3gweyB73GmgA4Whyd7BaSLZ7HchkBv6vDSs:n5eo72xWoIgs","tlshash":"1532d74c7293f89d09a350b0605fb907f1a96a5138099696f3b4caf539bcd0e6326f3d","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.493729Z","times_seen":1703,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/shoplogo.5dba109d.svg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/shoplogo.5dba109d.svg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16733\r\nvary: Accept-Encoding\r\netag: W/\"16733-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16733,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5dba109d1906ffe7841e39bfe46af5a6","sha1":"29fb18dbcd0797618c3503a556dfe1fa7ae972d5","sha256":"f3ef67be6f6019737bcfd90df39ee34de178e451934b5a391baca7ce14657cfa","sha512":"b3c733d65e7d637ad726c1c4459e0805227bf0e07cffcab85ab8d31813cd1c4ec2824b4498d5ac1d62c4b2644b281f83348b347429120f338c3a6e8d43b807f4","ssdeep":"384:fdHd4OOxVKX6KTxrwTQAIDs7+S7MLWq3Le:fdiCwTh8s7+S7sI","tlshash":"6d72a6cc3b7992aca484e7ff571294793c51add1ae5ac524c3b41e1aa8c082c1ee9cd7","first_seen":"2024-04-30T16:10:46Z","last_seen":"2026-07-19T16:24:13.420481Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JJQghrP+1HPrW7NvmFxBbdMKVwQPpW3gK/CFg+iEE6noeH/8Ugxl+gzp1Mns7UTnBnQKWWbuyRRtfV5KePf3zYoaPPKE54yi\r\nx-amz-request-id: X23C752D273J9YV7\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"0527d1653d7ad2d9fce0c6e3e6ff3f8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 17300\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.713981Z","times_seen":9926,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":809,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HzhiezK200XJ6ehHNxYF+of1Bc4JYleoNlm9ngnk7IAuTZaT37AJqajB0LSM5V1qXrccWdbCOek=\r\nx-amz-request-id: X235E0C2HW9AM6BV\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:44 GMT\r\nETag: \"cfcc313a94dfb8530acb5ecfe5dc53af\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 132447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":132447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"cfcc313a94dfb8530acb5ecfe5dc53af","sha1":"4ce68057416501691588568831526f3f621377e1","sha256":"616cefa8fa49014d34e31d96d913620bf5252ad75654db3924f71a05834202c6","sha512":"fc051b5d6e2a87267ee275655fb446499cd4f41eca27a43c7e3666fedcb37364e65086055b0668434a8e8f0c9ca176c4f9570de51dedeb85e37304804be91846","ssdeep":"3072:ErQx7WJnVeTJWMRXz15rKYLbYeZu4G+gqg44O0wZfeN7yC:KQOnVMgeyH+Q4WWfeN7F","tlshash":"28d312c06b111bcbe5c83fb5227a928237e772399493fd323981d26e59d1c78a237d42","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.989788Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":552,"dns":0,"connect":0,"send":0,"wait":108,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-377c362c.684410b2.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-377c362c.684410b2.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"7256-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7256), with no line terminators","md5":"970fa2497f04c779709941f8b9f83de0","sha1":"ec137ecbc0dfc40c551633abd2068393490f9519","sha256":"81df35f254998948a954ef34ab814fdcce5dc59453c6399284bef1f22f0c9b2e","sha512":"1040f5e3960fd3149a34b2b975188924249b959c72217e9c6ed27ddc6b89f646dba6631d17a4a17487c84875bf28ef17058a5346bc2fb1cc9e9ca331793dbc68","ssdeep":"192:IzEOxr768X/3oFyngdSWLPIk8PK3fSBX2:iE4f6m/3oAgAWyC3KJ2","tlshash":"63e11af6e5758031ae7be6d671a498fcb818c112edc283e972d07638c8c7693139574c","first_seen":"2024-05-04T04:46:06Z","last_seen":"2026-06-03T23:39:34.540553Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-11-06/e2e57f13-bf6d-48e0-be0a-1a881b082e8c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-11-06/e2e57f13-bf6d-48e0-be0a-1a881b082e8c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: awHkQ+bywm8ihlf46aH9tziQmoO3qUNLcHCFwBdDO+NyqjmY7QKM+XBWGbZ/0/g5nk4niWwNqOj+igAmqnfwOMW1vTpwVdtc\r\nx-amz-request-id: JPZPS9Q6NANYAP6V\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:45 GMT\r\nETag: \"292f81f90fe6cd140ff2e3d5ed135a71\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 91249\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":91249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1078x774, components 3","md5":"292f81f90fe6cd140ff2e3d5ed135a71","sha1":"0f4330a32fd09325d535bfeb90e423a3ee421f44","sha256":"d88ba58bbf925231866abf29db5bee81900e5e7cdb49cca4509264528a7ee976","sha512":"ae6a21497015b12bf1b99dc4301fef11d5616d40ec3e1f4d12a011a89d59c7824ee3dc00d5963a78099f598ef715fd4389ce4bf9b23dbbbcfe1ba317a513c9de","ssdeep":"1536:Lnembrn6M4ZkHJgptZaGEISdc9sth3ZtAMOxh3W75UCerd:Lnembrn6M4ZcJI40Se9s3AMOn3W75eZ","tlshash":"4f93e2c532615903d39d4b7a1e8912d21210ff7d21c2497be9d64d2f2e9da736a80cdf","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-07-21T20:31:56.007813Z","times_seen":857,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/avatar/2023-05-27/bb83d710-d830-40db-a3ea-ad1c84d707d4.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-05-27/bb83d710-d830-40db-a3ea-ad1c84d707d4.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LTuE8RZ4j0PfNDI+KjDi1OggUQUOPInQq3QMvbmAfXcRih1nHMwRI+FriQLjjRa+WCTcYC5k5eW/JxvHuG3VwzfL3tmYjDjs\r\nx-amz-request-id: JPZVT4FW0CN57726\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:20:56 GMT\r\nETag: \"72fd36f0d2f325647f3117410aec1dd6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 14021\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":14021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"72fd36f0d2f325647f3117410aec1dd6","sha1":"7ee804c2afef0256e666952f16239780acc8de61","sha256":"c3041ec54bc45f4d7ac030cf08264a14272459bc059ad82c7e8bf501ee96e9b4","sha512":"1288bf9bb3ef598d80744253b06416d96a58aa89d2be7102dcec88c21f1a8fa36fd72ab9040f27bcaf2f24d1fea44c56ed857493834f5f1581c21883041ad6cd","ssdeep":"384:7T3q3eRuJHzW+tRWfF/Kc2hNCzP13TDTv2VOu68CAvkfChP3b:7TDSqec4hGNDfv2Vr6Csqb","tlshash":"99529d91c740f5f9db8406f629001bb133b62573ba3b2a75b6bb84541d7a7a87304fca","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-06T17:43:37.918653Z","times_seen":2046,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nHZpuEdxgk7Pfy5y1mAD5+4BPr491dJfeRvOXMj5Ql1YRe+kve6y/zH4N90BSc1IDAL8tPgMQzg=\r\nx-amz-request-id: JPZKYEPVFJWA09QX\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"4fefd642d0ba649e2638d79aba1f06a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 125293\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":125293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"4fefd642d0ba649e2638d79aba1f06a9","sha1":"2804f3147c498add7926958e9fb5c6561df5c4af","sha256":"57f57a5716871604f452cfbbd9ccc5dddf928412ebd6c445cb85e3b79ff559e6","sha512":"2823160b04b81bfd3fd1c0984df0f804503ed8f26358a213b577013e17efaacdcd25079fb1671d37bfd55989e912ef69eb7b0268025cdf7be8cbaa2e9edd1aa3","ssdeep":"1536:Zle+qHAVjJGKWgL1u/BDsRc6EKkibdjbhL54OKzQSJaB7jvyvolZKAztq4CWw21u:ZBqgAyBuJwK6aqFwOEQScRqF01M1d1","tlshash":"5ac3120265245f0ee9afddb0b65f9be11ba6e8fc18f180937b39344441184da8f65db3","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.722767Z","times_seen":2516,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-24e95abb.f4060790.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-24e95abb.f4060790.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 830\r\netag: W/\"830-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":830,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (830), with no line terminators","md5":"fe8a919ba710b88c27be2a80cb1fce74","sha1":"ef7bdc5ea44742d40a0b67d268b4d6d5f939eb20","sha256":"c90ecd0bc9ca74176159703f5a00b82bb0b3b8e9381baf84aa98aa1fc6362700","sha512":"dce714b3e6ddd878da269a4088b61fcefd33a6dd3eea3d91df380dada97c8b7313085fd0e0c57fc53ccdccf3505c034325f4719507c10599cfff76937b74122b","ssdeep":"","tlshash":"55016b5c79e1b44b0a4a78f5812f55d6616b24bd19eeb813eaf090d45f30cad113aecc","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-03T23:39:34.477324Z","times_seen":3897,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/vendors~app.31b97418.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:51.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/vendors~app.31b97418.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:51 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"248173-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c877fd94443d7350d24f3dae5c27736c","sha1":"7bc6e0ed6bcda57d61a13f2f742292e4d7643ff2","sha256":"2d316e03fa6915497260913305a66fd7e4470e5e404d9afcd5b2fb5ab18eadb4","sha512":"555bd4fc9c43c3fb1c0f4e5c76f9e688ce5909bfde57ef105f1126daa97e7c56e881c0081575abc0d274923569ffc0b12fe2b422277318912477b9e41de312fb","ssdeep":"1536:528Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:StKw/27eDLL6ob6v7f65WCXkb","tlshash":"a534b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-07-19T16:24:13.438631Z","times_seen":1647,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/logo.4c830710.svg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/logo.4c830710.svg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4653\r\nvary: Accept-Encoding\r\netag: W/\"4653-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c8307107f9c20a6596a2cbf10b06b75","sha1":"f1c407fa9b1a61d1d1a8287f76987fbe7548bb2e","sha256":"ce7e5ad7d3e3203c8d30415f82a1ea019f8ad15adb22f82521379cbad9688af9","sha512":"e4d3aa819b25c4880299dc08d724fbad68f90b200339707c3c9697f375d213f73db42f747761f8fe9582f40981831dca974c77f935c48d100ac19d86bab51dde","ssdeep":"96:/f4cWnT3BhuMcyPg+2kq3NhssMvbDtEDpyyOm1QvVJ6WCwc1dbIJ:n543BkwPg+Q3NdmEnOm1bWCwc1e","tlshash":"37a153cdaf71dd4005c88bea7f21e0dded2b848657c94c89d04d9f0815e38aeae19997","first_seen":"2024-04-30T16:10:44Z","last_seen":"2026-07-19T16:24:13.453568Z","times_seen":928,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: MA5gliz9aO7BDY6r30VoZpSm9te7sIZJY0Jl8ZhZPXRdsZAofmEHNzN7tHoguzzeP1Bf47Ve4aiIOr1lw2hYG4E8uQ87GHwJ\r\nx-amz-request-id: ZE55S4Q8PQQ89M0K\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:36 GMT\r\nETag: \"57fc8f526d4275ea03d2bdbdc5576892\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 170933\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":170933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57fc8f526d4275ea03d2bdbdc5576892","sha1":"648d7e45b5f40cefb1d18bb9c726fa2194627313","sha256":"5b08dd67e7ff0eb29804f686a825a0607fcfad5e509780a30adfea265bc26d6d","sha512":"046bbf2c489dd817458bb078c2a21eee87949f983e0924087800414acb782c41e1e777873e9bf43ad90c456a764044b9a142646b88ca61a2589c90e0a31b860b","ssdeep":"3072:uZZZCa4TScGLIk8FhGOovWdjezklGcjjltrXy2zm423z7LOOCAr:u3knH9GOusjezklGGltri2zm3fLNr","tlshash":"a1f31238ed7ef755a4fad15f910cada0a0f877204832a5813e37d7d437c98a192eb249","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-23T06:19:40.838373Z","times_seen":2496,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":991,"dns":0,"connect":0,"send":0,"wait":121,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/946a7bc7-97f9-47e1-a545-5d6225a7b4cc.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/946a7bc7-97f9-47e1-a545-5d6225a7b4cc.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jK3aoOONmg2Gu8FN3/MsmZXFj1BjEYXDBYDTKU1xfx93vAEX/0lNdhimsLmAZRKj0yRCAXjVjcWnsZrvdf/WOmNi+IvtZie/\r\nx-amz-request-id: ZE5FEEPAHENXTRN1\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:51 GMT\r\nETag: \"579b662c6df2b3a78037574279a6dbf0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 204661\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":204661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1174, components 3","md5":"579b662c6df2b3a78037574279a6dbf0","sha1":"ed24732a5a0395104ca95e074bfb18cf78622f50","sha256":"d6ff3f43a65f9161644219724424fe7856866883c30db94beba7ebad88e4f246","sha512":"8aa538d0a0e7d97a4eb7d5a1a24079351bb02ae73ecf2b95affd033c31a358b578ac375e24fc29308cbe00d950ff7b4fff992229a5f8cf378693537ba21a7ed7","ssdeep":"6144:jaI9PtYKdwCGqPD8Qd8NdqM+JxTj+F2K5SG:j3vyp09goM+m55","tlshash":"a41423178a0eb970c47d95738ab75cfff270df56af642ccd00c198e5967a22018ac792","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.403292Z","times_seen":6995,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":937,"dns":0,"connect":0,"send":0,"wait":140,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/b4fea0b7-8319-4135-ba22-a78892456e35.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/b4fea0b7-8319-4135-ba22-a78892456e35.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5Rd6HJJumjMk42PQ3mDtfKg/NMrtwF7CehPnV13jDy8mhuEuYmMhc2Yt5RBfv2HvIWIY93Kp6br2FJ1I4SnN7GFDvzeX1EpK\r\nx-amz-request-id: ZE54C4GN4W2HPM5R\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:04 GMT\r\nETag: \"798834cccc740a3295d495cac60f0149\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 164479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":164479,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"798834cccc740a3295d495cac60f0149","sha1":"5919a207c2cc7faecd8997f61a87edd42a7bc91a","sha256":"c2dfff9df4fe2c89659ebf7be17b30643735145b0430a0db2b3eec09811564f3","sha512":"764f00b8a761aaed41926b5560eb93002271ad5e6ba9e6137648c66135309eec07c4acc5b865f88b8454ef5a425fa2b72d507535070064806d31fee8596306f7","ssdeep":"3072:mdYvJl0uOestG0Otpa1xKIfAhGGerpO9WOnaTJjFnVISpYrkq69gkpOO:mKRiYOGRtkjKIBOsOKFVR4kq6tpOO","tlshash":"b6f312426552c9b7c010be340e4959edc30fbbd5556e2d8e1f302b44cb4f997ba2afa1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.456534Z","times_seen":5745,"resource_available":false,"data":null}},"time_used":1169,"timings":{"blocked":1039,"dns":0,"connect":0,"send":0,"wait":126,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-83fd3762.bbf1f88d.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-83fd3762.bbf1f88d.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"2267-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2267), with no line terminators","md5":"8c6c2e32d246f43938c015ddcdeb69c0","sha1":"b6c0900796b2f918e95196d1deec6b6bb23de45c","sha256":"2286584045d499c3f6d7e0178051e8cee89b1e36412f7e91b095f677e1b46c73","sha512":"9bb9bf502e8cfe654b271eaa74dfbc90f633cc0ffc25cd2811f89643b603d79584fc1396ad80f23b84cf54beffa20f21ab81a34c3f799d0b7b6cda721418feab","ssdeep":"","tlshash":"5241c0737065617ad9b3e36972419ccc7a81f243e3b352f8fe95e43c89c2aa2193019d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.440992Z","times_seen":6380,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-356c00b0.d896e6f3.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-356c00b0.d896e6f3.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6372-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6372), with no line terminators","md5":"db0643fce5cee527ae28555e8cf3c7c1","sha1":"bb539dca2080522cd6f21ee838b632211051a0e7","sha256":"f2b1c7d2c3ff0ddb8e9b7c7dccdb93edfe1944425618a3d9e83bb90ebdb2f663","sha512":"a50342ee4bd46e911ccd57e0bf1842bd645e8fe63e8fe24a08250323643af6bfb5afa66990fea55a3c60bd6e62a9eff9a3482ee60c4eae7e5224cd0ccae54bc3","ssdeep":"96:J6Mt/nsTVUWfrMSXH6RJqgIldI9OwnZrvVJKTCpn2Vh4n/UJjlVsc3YC:J/sOGrMSXH6HqgCI9pn5Vsm/43","tlshash":"bfd1190bf05278bc895b6294311b2328b7702bd0a040486af73cddbc66d9d68232777c","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.453763Z","times_seen":739,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-533124bf.94e96180.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-533124bf.94e96180.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"16079-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16079,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16033), with no line terminators","md5":"bfca2c0d0c02fbdd1b9eb4bd735a94ea","sha1":"c936111bfdce4584acc778b3c00d325c6dcbc20e","sha256":"debd7d36a999479eb63c4224deab2309b8fe3d4394150592ccc416277496a0db","sha512":"685c2d8fbfc840bdaddde34c93517a86e2a2fbdb7512d41f4cdb89a43f0e3a0ad32f103c11c2623c16baf89af624d4398f924aa9c3f1def58906da9b1f6e7ce2","ssdeep":"192:0VYthRrXBrWFGaEERrSv8yO7cudo8KwRHfOwMsGN8qAVFOQzpuWocKwRHfO/MsHs:00XcM1ERqC7HOQqIl7HO9qIMvxGK","tlshash":"b172ea2a50446c9c0e22a0e9702b3464b05959505919df5bffb8cebebaced38361737f","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.693626Z","times_seen":263,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-4007d5e3.3ecf88fe.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-4007d5e3.3ecf88fe.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3338-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3338), with no line terminators","md5":"1bc5b8235f9e8d5bf3961279423cf630","sha1":"466627105df20f8e829d3db72a2617802b7b265a","sha256":"cc7c2d00d52891b7af0ae290785d54f087c4f61951893b7c7fd8c869f7a8047f","sha512":"a2c17506a8e46344978b7955c1c162a6fdb844d0ec51fce021c04aee33df5d44cae64f10a7a6bf5ec295a1210540e5b82c1f7e79b9d89aa14dc29e7531cd81ca","ssdeep":"","tlshash":"766110382130361c3b37922a25c8f54e2619a9e5f18995c9ba98c42f4edf769dcb0263","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.508224Z","times_seen":6672,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/right6.b8bac159.jpeg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/right6.b8bac159.jpeg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5087\r\nvary: Accept-Encoding\r\netag: W/\"5087-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"b8bac1593a48bc443848bb3a683a551d","sha1":"308b1b03b09b9865605a8210d0829847ae0d27e0","sha256":"10a746b60bfa7ffee5b3cb5d7b628ef08774e826d869a9418ae618da09219b61","sha512":"b4728b8792aab88c835d7058e7ae673c20e2d421d0e23d57b7b3b5fc69b00dde745ba47586721c3f5d05fa36f914aca9b483570011e03ed6e90b9772de3cbdce","ssdeep":"96:WhxxYqBhBnFMEKYhu/hCbjftpvzaHZx+RxXP+1VHaWccmRAi5Hx:EPdn2E2+nba5uZ+1VHatNl","tlshash":"6ca15c81f553fa1bdb8293b099a43f100f217c332be267bea602581c1847ef21479b96","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-07-22T06:10:16.184091Z","times_seen":4727,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/30b476d2-2a51-4c17-a8b4-b57d7df5f00e.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/30b476d2-2a51-4c17-a8b4-b57d7df5f00e.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: X9WLdRAlcuyyzwbDw6NV7biv2IIf6ce+QMjtZgUP+r9GTpBO/XZBtDMmtXaEbE8vbziJbgoBZi8=\r\nx-amz-request-id: Y8MAPR4BJ3E9VXKN\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:12 GMT\r\nETag: \"fde0c1aa02cceddb35ad54b683fbf143\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66684\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1488x1483, components 3","md5":"fde0c1aa02cceddb35ad54b683fbf143","sha1":"c3f958df892d41c2f9725f70e833c342b0f67f01","sha256":"d21cf0f51f8a537018d4a53b1962ff0c6fde6f637f9fa448f50c60671809c182","sha512":"928ce0eed52eba6e9d64fc73b85fc8f9955eef1f2c122a6df23046d51ad1600e8dad39faa4c07b541033473ed98f6bce2b34a128af735a0f9250a93bdba52930","ssdeep":"1536:CZA9B3wU98oG3+rPg2E0IpEtJVv+iiUB5BgnRVO:qAz3d9fRrYhpEtJVvQyUK","tlshash":"be5302c54b4da98fc3fe13b4611ad9738f82586ff325a84a11458f64613bc662e80cfe","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.463287Z","times_seen":6792,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-6820d330.d88286b9.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-6820d330.d88286b9.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"21890-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21890,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21834), with no line terminators","md5":"aba6f13462db0a33a97ddbc7d8be7eab","sha1":"c44c2652c6eccbc1d8070d497a0408754e5c17bf","sha256":"174df58c9eecac72e508ea0ea5059c39280a8f47751e33f67e07faa2bcbe9ac0","sha512":"96267d4ee42a8ddab5a9abdb54392e895a9bc36bd736031114a797d089406f8a54a3db044c16e45a56c5b5677c711b0ddb91def7a7a361a71763cad90b20c1ae","ssdeep":"192:/YthRrXBrBBcE7UxZB73GKX8QBNgtTkBsdQ4y1wTYDLihWL9VeuuyWwQmcuG/qio:eX3BJ8D723AlU9kH9YPAA69SZwWeGIOg","tlshash":"cea2b30ea145fc9b0fa272e5701f301160528454680a9e56fb78cdf9b6ffd29662373b","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.698583Z","times_seen":281,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-7bbab158.8631e82a.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:02.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-7bbab158.8631e82a.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:02 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"31871-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31871,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31871), with no line terminators","md5":"d6f6180b79d2cf212712c08043f02f1a","sha1":"32aa31472167d07002948b3e39607465fb6eea15","sha256":"ec1d232d0112c07aba1f039297aef413ca65c01e6a2a42c3fca148e16a1e316f","sha512":"c38c14dfdb7da7c8eb578caddcbf0c3135958380689f364e8770024ea44d04493b0462f0f751d61ce943abfec689cef5e95062c81c7b81f2aec313b733206007","ssdeep":"768:ru4prgRRzokzpeL0Iuo8KSFJVfEjedxj5Fh30:ru4qUf8zFIjePj570","tlshash":"e6e24a4f60a5adb8cd8e6011b415a23970b56b80f04688dcb7bccea84598f78772b77d","first_seen":"2024-06-19T01:29:40Z","last_seen":"2026-05-17T03:11:11.699911Z","times_seen":809,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":0,"dns":0,"connect":0,"send":814,"wait":279,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-83fd3762.de13c570.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:02.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-83fd3762.de13c570.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:02 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3423-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3423), with no line terminators","md5":"2b207373c31b539d731413b20e6816dd","sha1":"f905a0a4ecf04ed721c3240776eb3ee88bc275ff","sha256":"9cea95bb9e08566cbd5dc0cb1228aa2eef1f312d4710ab8498bfb3e8f4c10383","sha512":"a29a43519df3089fe8f8d8e68682eb4568e3d1018f1dee74bf00702db220eabfa5058286cb32e1eb05d4a2045f81e039d47814ca0f4068ef9ae405abe5a5bacb","ssdeep":"","tlshash":"1561640e5453b47eac6e5102b11975a8a0722fd6c841c4e7fa3ccea993d0d74332ebe9","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.490511Z","times_seen":2427,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":785,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-b4023030.20d1b0c1.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-b4023030.20d1b0c1.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"59935-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59935,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59935), with no line terminators","md5":"9714c0836f4b1d81394f420c733209dd","sha1":"62fba2dd3a2f6ea8c8e47886aa2f5b49bc54b5f7","sha256":"3eb96797d6071e275e284e7151dca6db9076f77c2f27447797095cf3a580b6de","sha512":"c2fc77be76d503f8d1d39db8d88cebeaf24500b096c5e0fb9d56a68a29c6d044b706f64150e999925e65b266f96123d0e9d00c40c1cd4c2e23514ba84f9d468c","ssdeep":"1536:erVf1h8lvd5sz/rQBC/2Y7cajHNXyO2PD:A9OxdKDQk4ajHZg","tlshash":"7f43c03394e3a4e7ce4780c0b30b7d0c5ea11aded986c893b274fc55a95ab3d6a1e158","first_seen":"2024-06-19T01:29:40Z","last_seen":"2026-05-17T03:11:11.703283Z","times_seen":811,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-dcbc024c.b4863f7d.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-dcbc024c.b4863f7d.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"26857-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26857,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26837), with no line terminators","md5":"9f0691e73ae6889f051afc50833894a9","sha1":"9153602f9567d94ae3ee172cdfe5a15a6df7514f","sha256":"b7adc11515247bbe6a3109344b5c9f3b96b2ed1f3f98a402ff93a2c45c54d7a8","sha512":"722f1423b6347db21b697d2dfbeab3a11ab890c43e01cc274b16afc1112a7b841356ddce56f53dc660a15d932f686fd335bc7785f2c4ae6c5dfcc85529dc3e7f","ssdeep":"384:LgsnVXOdCkJoHcsJ0UBlDKalA4NMrh+/QeOYaWvzghY/Jz:VedtsJdBlDCU/eY+Y/t","tlshash":"90c22a47a4d1a87d8b937159341f2198e6762fc5d045cca6b63cd8f9e2bae30231b72c","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.452522Z","times_seen":771,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/1b624419-30da-466f-9d2d-b0413cb30428.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/1b624419-30da-466f-9d2d-b0413cb30428.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9OjumdOGP0vuMMiRWUs4VxhDqeRHBt7xQ0bDz7tiV/Z/ClJhmQ+eYlAKyxguTiFhHwBnb2YueiwLfQni6ssXFu4YWqUDmxvY\r\nx-amz-request-id: ZE55MEW539DB2MBW\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:54 GMT\r\nETag: \"dd9bf4005d21a4d398581ee790deffd0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 88025\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":88025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1458, components 3","md5":"dd9bf4005d21a4d398581ee790deffd0","sha1":"03f62c4320e1236c0e1408079419e62e8043168a","sha256":"97d5ca61ef391b0128979a0e568af2d0d56fdcf41a5aff34ba1feb2f270402c2","sha512":"d89a23bfd4b1b9df695ffa803afc183c6577245165994405b7160bcda6c9d0331dd923dd40d9ec650055a9364324db0424b3919444d7a9089edb1f9841261743","ssdeep":"1536:EtK5Xgkq/61E5KYMb2QG4djBUKFQN0405AQZ9GWGCyLmgSOrH:EEgP0E5K+W4052pC4","tlshash":"b88302942b479630c09b61b0875e0e912c72cafe855f20cb439b9dac50d95e6ff134af","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.446969Z","times_seen":7334,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":913,"dns":0,"connect":0,"send":0,"wait":120,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OdKi3HyYeZsuhZ/VGyJ7x96vF1zgBrEa0lVWfaG+SzAXpK91tN6wSzKm+hFJ+RJVErGxl3k/IQE=\r\nx-amz-request-id: JPZHKXQG7MH0VCY9\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"2f880abf39197c23624ec02a97da066e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 6873\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 291x173, components 3","md5":"2f880abf39197c23624ec02a97da066e","sha1":"b25a02eeabb058144d354446b3d997210eb7ea14","sha256":"f937788f543bacca3b6d8e11e19123d8a727a46aa05b5bdcb0edd346d02ebc7b","sha512":"2f37634b59d4e1e2124b4c182b2bd349a72149ef956d584e7f6c8f23fd95481b02051f6ceaa8823e6db9641b55aa364eade03d1e14d0ebc259efd4b4600ed277","ssdeep":"192:bpSOyDwhDh0ht/pyBYnSu5HtAUGLW5pe9KIyoQk76AXRtL25V4:wFDwRAiOSMNP+WmIIfQ5C","tlshash":"36e19e13b51ba152ce247b78d7a362f213fcfa2b3d717621f9d06f5069f399aa911004","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-05-17T03:11:11.707162Z","times_seen":2027,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-4a688b54.8fe95911.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-4a688b54.8fe95911.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1118-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1118), with no line terminators","md5":"51469bb71eb3ad53d091813383d59f9f","sha1":"2dc9da09668fefdab35ccfe6c6a3ec5485ceea3d","sha256":"d9daa1e1faf153cb40d02fe3294adfbf28aeb622797e00cf94c101ccfcf0e073","sha512":"aba105e77a63de395ba92e7d7557d7b7ae209f72dfd735132a2b4d234f8ac75e09d4acbeee7b2cd6e25307285d4d3a4988e9b8b8758761b595c96d20994bfffa","ssdeep":"","tlshash":"d221cef1906510385aabe6b430f0a9b9705df145ea63199c5d6533ad49d378f02e02ce","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.435641Z","times_seen":5604,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-04d0d3d4.d31236ee.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-04d0d3d4.d31236ee.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"7778-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7762), with no line terminators","md5":"4596361a4215f3894daa948f9d53267c","sha1":"c2111439946ace28ea01444f0874e69abe383c08","sha256":"a37748e6be490406b5053b53bfdc068a9bc372e115455341d595670df8ec5b6a","sha512":"d780b921fce260043ce9a0e3d5d0e0caa1a5ab676c6babbc6e0d4f7187e5b8a6ae9b0263ee4021bc96b9f3d3b9d717ae5fdfb8e5b9912a55c163e543a7e6cba0","ssdeep":"96:5vx+E6EeH8/8dv73tO2y5/Ifv6EECYIbWV10aAfHZsALb7iGB+T2GZG0/McEae2N:3wc/w73UlIfy0YrVEaAGgrbb2","tlshash":"08f10b0a90035868cf5e5081a0297e38f4b53ed1b912dcdaf7b8ccf8d195aa5335ea7d","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-06-03T23:39:34.576607Z","times_seen":687,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-6f60fb4c.4ea98c77.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-6f60fb4c.4ea98c77.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6493-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6479), with no line terminators","md5":"9f885416897b4005fc7c275b88ee03dd","sha1":"f868c8c3fb15d5506d7dc99c605cbf90eed7579d","sha256":"5355ec801c11a7dfdaa1e1c3586104e999ae92e3ae448df4eef7e222975bea3e","sha512":"e2f4606c39a78a63948bf071e122bb61319d8a7ea5bd8731a7704a0890bb4ddecce1c3bf8ad05d02d0e6a87de304f6d0dab109253a4cbd3a531696827973e702","ssdeep":"96:Yh+ljrEdlnRrjYXkLIuGtdcskeIHKKeD7AkMTEWgvbVPLYsoqfZTxq:Igc1j45uGtmzUD7AkMAWspUsJfrq","tlshash":"bbd1e89ea118f80d4e1b9152301d29b3f5a93ee4b024d9dab73dc8fd619cd102b2eb75","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.519353Z","times_seen":868,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-ff2fdb80.373c9e7c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-ff2fdb80.373c9e7c.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"13681-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13681,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13673), with no line terminators","md5":"e19d0c0fc8289187afd59d055a800fce","sha1":"e9fb79effe14f4f033cacffad374a42a761f4b6e","sha256":"a0cf1a174a89919d44ec675764cd4966143ec595bd60ea7cea0a686a21454db9","sha512":"475bf5673f9edb32cff067713c636e1c287f36e9faf03d6f870ec97734d10693880e71459cf2b918e39c2479eb8cbf2233c89eacaebbf1244daa41fd334ce9cf","ssdeep":"192:yZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGCH:5e7FJsHRpCQJRX+2pDHmmvPQ","tlshash":"4c5294e6c470a4bd895a81726055e1e0fb653a2cd102514efb7cec9a72ed428333e77e","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.439292Z","times_seen":988,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: KCYbGLW3AtSiy9InQlscgB8KryxTa8A7UH9+Zyh1HuWCRWY51HEYI820SLzvJsYoCN+oKmJiCsM=\r\nx-amz-request-id: X2359E5KJFJFK3Q2\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 02:54:04 GMT\r\nETag: \"8827b56e1c75a8cfd6be59a5b6d760eb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c\r\nx-amz-meta-s3b-last-modified: 20231026T124940Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 32549\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 431x1340, components 3","md5":"8827b56e1c75a8cfd6be59a5b6d760eb","sha1":"24f3ff786d1c9fe9e787bd9d1977b90aa1d9c3f1","sha256":"f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c","sha512":"233fbb69169772f8a86abc5ea61ae787e1d9b003148430041b7d3e38adf1257e53f1bbb07f31f7893dbda96679864f8d78d9587298deb69013ec2612f7a02d49","ssdeep":"768:dx2GWbs6oBwPJj88PBuMQmJOcjEiKyquTxPOKIjktU:Oe6zPJQ84vcjEinTxGKIjSU","tlshash":"7fe2f10582cbd7d1ed521c7225fb3336df24eb0ea5fad05d3b202b86951ba652683c51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.977796Z","times_seen":2410,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":216,"dns":1,"connect":94,"send":0,"wait":124,"receive":98,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ZO/jGjUISEbpLgnfBuI9KGx2Bv1uGnF0iKB9c2VY2S0y6UfK8WYV/gvFiIxThVpW7Qyw8/QDooc=\r\nx-amz-request-id: ZE5C16MJ9NV3TP6X\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:55 GMT\r\nETag: \"4d6bad8f76dccb096768ff49cc7cf445\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117061\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1410x1423, components 3","md5":"4d6bad8f76dccb096768ff49cc7cf445","sha1":"de7037cff667ef30de1bfd8e6b7ceec7c69dfc42","sha256":"0d98b6495a5e33454e197017e474fc8e00ea09e9d3e72d6bdb54ee943ed1fb40","sha512":"8bd3d378f9633511746f337bfc2cca32278fdbb5458cb2f7d23d9f3167a6372a172196821b864488d9f30f326785276baa112893754bad58dfd10b15ad0a2cc1","ssdeep":"3072:iypv8tQzm4aYSV7OHP76tr4EbClnokN48XL:iyp0SApOHPsrfbbX8XL","tlshash":"1fb3121b9b295d27e3c7537156210310963cce652895ee3678457f8e3caf3aee88c98c","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.958136Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":648,"dns":0,"connect":0,"send":0,"wait":108,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-574f8736.7da50378.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-574f8736.7da50378.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 971\r\netag: W/\"971-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (971), with no line terminators","md5":"364b94b45eaf72b8e38bf5dc4b2348f9","sha1":"869691808bc786803fba4730ffaecb8c2c95a975","sha256":"2da93f714bc866a0e4f302d78c7e5d14d291c27551b29d27969cb57089a191d4","sha512":"a33a5504a3284c5c20c32c7385f61833fada6b1d13e575231c0153a9fdf87d61b7a62caf829e6a22187ec6c8699b87ed13dec945c814e12be7034015716509a0","ssdeep":"","tlshash":"ca119bf151081435b867f26475d055fe316ef343a233446daea4b3a6ce93a9b12212ce","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.434707Z","times_seen":7560,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b62216d2-e350-4603-a071-38ceef9857ee.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/b62216d2-e350-4603-a071-38ceef9857ee.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dTBTxFijJWXtyWBZTEVEbMl4eqsBZeKnQo4R8/h+S1/37f+WLK/V23hHvhiJYbMdqTEma+FncjQ=\r\nx-amz-request-id: 15C1SJD0JWEN73WA\r\nDate: Sun, 17 May 2026 03:10:01 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:03 GMT\r\nETag: \"e38c7b2db29e613281d1f649ea95bdec\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 65290\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"e38c7b2db29e613281d1f649ea95bdec","sha1":"0e4ecd0f7030abf581c7736e8cb1776928b5c346","sha256":"68e7f0f0cf6c41ef90650252073c37bb7421bbf0b7dc6d5ea2e52cb65d04f1f9","sha512":"b64d3be04d7ef4f8139729a1c8b1244635ca6d0b55f2d473cf4a408ab7d4d0cc7b029b20c922b5bb071446719ebb403f0c1c9031070e4e3f766db4f3cdaa0e57","ssdeep":"1536:/Wx3LzPn5TzxLbM/S3O2bEZdB0P7bjWXQAuunq:exbz9ztbMcbwdmHjWKunq","tlshash":"7953f27a2f90778cceafdbb54061f2c5510dca2cac01a67e174512fa9f58c8e9e923c5","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.514547Z","times_seen":6764,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-68f12e90.27a370f9.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-68f12e90.27a370f9.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"4695-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4695), with no line terminators","md5":"2abfc31d2a6752d6d66f5fa21c7fa262","sha1":"63116607f3b72d74be9d1bdd5050ac15859f7243","sha256":"9159959031e6a701bd2e9e5baaa03c4f14d6c2530977a9e013c8af24c4838a37","sha512":"ec6bd33bd4a69b9e93485dfa272e08170ac3c17b0aec5f291b716c1e370435f6bf26fd7b2139aa75790defcf2223f4deeec07818a549334ba069f8a307201127","ssdeep":"96:VQrF215xix1yXSl6nS65EaOYIj8MRSLRsR7S6m0Z8u/j/20RO5sR5WFs5E:VQKM8F9","tlshash":"77a1b050b15e162b687bfad9187cdd4cb0d6fe2ac1324b76ed9f24148882e733622235","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.500613Z","times_seen":5224,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-68f12e90.899c1691.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-68f12e90.899c1691.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"17509-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17509,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17501), with no line terminators","md5":"a930cdf7485ef0452267d3628c36a9c6","sha1":"622a46a370552f70996004aaf81908f5a261fdfc","sha256":"bfd2abffa1887b540d0c1abb0c07146e76b68ae614c93c74e40577f5c2214f27","sha512":"69d43baac67c4cb9ca902338d6a38f65506774e06fa30b6c2817023554e0bd739f3435bfbd4e7bb0f806a7560a32eb49281256fc55dc43d9c5ccf18c46cbcf01","ssdeep":"192:AMkDmgdzhJgFjz9Y7zcqv0Q5zd0z4uzUhHYk8GHzYDDUMyEeFoBgYQinOZsf:kt1hJgFCcqvPo4uL+zwDeK5nOuf","tlshash":"6e723c53b60de44d8e3b95c1363e3965a2872a64700468dbf77e9cfa124cc24354ab7a","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.650051Z","times_seen":804,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/5a905e1d-1756-453e-bc49-baabb5267acb.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/5a905e1d-1756-453e-bc49-baabb5267acb.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: b3EnOXGsm0NbNMeQJ+JokC7doSJdp2py3w0R6CrF6KFuV27apdkQOj929nB6iz/zHkt4+R/QIfM=\r\nx-amz-request-id: X2389M0HBKJ16J7Q\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:42 GMT\r\nETag: \"d65489337eec1ccd7aa3b7d4e85cce6f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 47706\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"d65489337eec1ccd7aa3b7d4e85cce6f","sha1":"363ebd6574ea0eef5bd9fa6ea4245988329dbe21","sha256":"9e10a358d6e01dd67c6fb8668c84cf319256fd3e31e95a65fcce29f090c43baa","sha512":"b4854060269a85c9f2f15c2f8c31144f09d1b29b3d68849886ad40ea128e8e3f86ef2546b42e19afe271bf97b66ddb135c3c52027f73ad7dfae5f87786160a23","ssdeep":"768:19SyEOYqddNLA4oD7z2lkXynB4d2ABlYO2yENr38m1BwZX5plmQQctt9QUMRyqQ6:uyfRddNLpNlWyud9lPiAm1+ZhmBA2U6","tlshash":"a32301427fa5aa8bd238af3157c3e749b86f8289d2a61d01f175ac128d41712fd6cad0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.516596Z","times_seen":7705,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":215,"dns":8,"connect":92,"send":0,"wait":115,"receive":93,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-3bd464d9.c47c7a52.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-3bd464d9.c47c7a52.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6994-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6994,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6994), with no line terminators","md5":"be4586b830ba0c7d3b23469ed6ac7a6c","sha1":"d5f396f218df9ae53675d8b2b6a1f7b1d56391e2","sha256":"77541f9f6028ca77ff8617b37da47182b91e50179a297b602f118e1568166240","sha512":"de21549b10e2994712c2929bb709335b4fd7619d931a332dbe7fac4392416c35003b0989753b01187b1e3c4c9a67d93e14a2e1f2389bc694ecae05c8e563a649","ssdeep":"96:cWUXzENwxyzEB7Xs7OOOOPOOOO7j7Tgeg/4zEoWayngdeVlWXShAgmbIkwa2PKJh:cXzEOxr768X/3oFyngdSWLPIk8PK3f3","tlshash":"8fe12af6e9768031ad6ae2d660b4d4fc7818c122ecd787e972d07634d8c3693075a64c","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-06-03T23:39:34.560109Z","times_seen":1447,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-43f51806.d5eeab2d.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-43f51806.d5eeab2d.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"28966-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28516), with no line terminators","md5":"a85b7e301ebc3babd20a0770fc41ffd0","sha1":"03ccb4a62c06e0358751a342917aee14b8c49b65","sha256":"6652e100ed679b0484b80ba32ef8452dd14caecc5f18d12c117b0907b65c4d6f","sha512":"667d1ab41e096fe51c114e03b6db0d482f25d301a70386d1e8f174d953dabd2a6e0a1006ea4609f452189d87beefe1e7457694bf38188c0bb28d1dba34ef5908","ssdeep":"384:65ym4ERblTT2yRvFR1GNw3VrgPnk4JGyg:Wym4EBlv2uNR1GNw3VrqT+","tlshash":"bdd2d84e71a17c8e131a4261745f2651a21a6129740ea0dbb7bdccfdfb9cd241832ffa","first_seen":"2024-07-21T11:31:35Z","last_seen":"2026-05-17T03:11:11.731196Z","times_seen":277,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/8f28f605-9543-48c6-a4c6-e8c636de7e5d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/8f28f605-9543-48c6-a4c6-e8c636de7e5d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iYZ7Tcl++mvMcHHhH4D6x9WVzctELbUTxqCBKkzm7TjhLyP1REa7uCCAkXxZV53xCozBW6TJaRM=\r\nx-amz-request-id: ZE577DJ274EAFM46\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:37 GMT\r\nETag: \"57ccd4508cb9aa0770d6f99eb7d7aa41\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43286\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43286,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1258x715, components 3","md5":"57ccd4508cb9aa0770d6f99eb7d7aa41","sha1":"7b297c1fe1347760132907f13ee3ed23e053d9d4","sha256":"39111c493bd0463e579cf0032e909fdb655cc21522f36c4c14d7cd6aa9750dd0","sha512":"ffdd78eee99d87340cf1389a6d92b02d2a9153926ffe67637b6c53376e6d9137549a7e0bbaea224c78cdacc83e572b014492754138357ec1179ce28018523e65","ssdeep":"768:18mUreUHhdqjj4ULRe7ZXEjL8vnXGyve23R3lwt/5u2Uy8xQ:UNmjjpLRIejkXNve2h3lWx","tlshash":"0313f19fb28a6941f1480c7ed2b8769fec823732256d6577ed75931c1b3b4403d90ab1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.513465Z","times_seen":7293,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":776,"dns":0,"connect":0,"send":0,"wait":111,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T03:09:50.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"7062-1777787025000\"\r\nlast-modified: Sun, 03 May 2026 05:43:45 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7062,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5123)","md5":"0a93495249c31e523e31c2f648f3cae6","sha1":"f3b17799f86296c05de97d8b067f940bdeb3a102","sha256":"94b28e218346b060e96888ac0165a949f2b4c5e786c9adf597ae36a2881e631a","sha512":"c56f86ae7249e3bd486ce2c5beab650f29145d9719fa81d486989ebd0895dc2c2be905a0b9dc1fc30ed3fc3e2672b62325e8075c3566e49d92da8745dcb6ebcd","ssdeep":"96:OockG7+f82tAHhvDYEp2NVNtX4/Iq7ikBjYu+5YgPH+pG3JcVu7oq:OocufJt2vDYbNVNtX4QC7cGMloq","tlshash":"48e1fdb9de00508fe9f0de839e69e71aeacb8c771130e450e658d84ed968fd4417b943","first_seen":"2026-05-17T03:11:11.732602Z","last_seen":"2026-05-17T03:11:11.732602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2028,"timings":{"blocked":877,"dns":83,"connect":261,"send":0,"wait":273,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-ff2fdb80.373c9e7c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-ff2fdb80.373c9e7c.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"13681-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13681,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13673), with no line terminators","md5":"e19d0c0fc8289187afd59d055a800fce","sha1":"e9fb79effe14f4f033cacffad374a42a761f4b6e","sha256":"a0cf1a174a89919d44ec675764cd4966143ec595bd60ea7cea0a686a21454db9","sha512":"475bf5673f9edb32cff067713c636e1c287f36e9faf03d6f870ec97734d10693880e71459cf2b918e39c2479eb8cbf2233c89eacaebbf1244daa41fd334ce9cf","ssdeep":"192:yZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGCH:5e7FJsHRpCQJRX+2pDHmmvPQ","tlshash":"4c5294e6c470a4bd895a81726055e1e0fb653a2cd102514efb7cec9a72ed428333e77e","first_seen":"2024-06-19T01:29:37Z","last_seen":"2026-07-19T16:24:13.439292Z","times_seen":988,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/fonts/iconfont.0080bb9b.woff2","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkktokshop.top/css/app.7301f093.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\netag: W/\"5212-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-23T06:19:40.75413Z","times_seen":8136,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":269,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3ZfjeXhzgbYycbR114mhYkN4bOzYTcRQw9TvRt90x5KRT6notp0mZEFhsev+fj2KX+wlHMt7+crDqrI+tiJBQwGXztD7pYWx\r\nx-amz-request-id: X231FTXC4SVF91VR\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"b367a1a2939abed5721ba1cf5fd272ac\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43151\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-23T06:19:40.73182Z","times_seen":9546,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":518,"dns":1,"connect":98,"send":0,"wait":120,"receive":95,"ssl":417},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-6820d330.92319b2b.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-6820d330.92319b2b.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3807-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3807), with no line terminators","md5":"43c4a284b9ddeee42b9307d605bcf58e","sha1":"122f3fcfab5747e5f999edea567609bad5965851","sha256":"3fa2cf8eb414e1985c22841ce453495cc293176373d528dc212a335905f1cb54","sha512":"a8d0960e930d64597c6ad8a16e61983e20afa0af836eb1f8411e552d74252b8e3b0b5306ac401eaea8d470486967c1336ad2ac3f1cc39767f87397f2df6f1a94","ssdeep":"","tlshash":"31710e607a22231b5ab2f7fb55c0a1dc3609622ae19340dfe949940ecadf3b65134b61","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-03T23:39:34.496889Z","times_seen":3734,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-2d7a155f.8ed28816.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-2d7a155f.8ed28816.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"27717-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27717,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27675), with no line terminators","md5":"7d5f9c003cbab39b08fdd6d9b55f22fa","sha1":"12eb54c7ab5da64a8726459ecca5501049044838","sha256":"63a267d3bcfbb71615b6c6695466bd8234e204e9c6a43c214a5376a6e34fedf7","sha512":"79bfa19cce2bf1882f8861748f0e9685298f59b6400ccfeef02dc25d2c6eea093d5d082f942a32d6cbe9d7ec3064660da3f7e4e7154bf60ffc708de7f86fc52f","ssdeep":"384:PFJ1G5vSAJRx5WaveIA6WwQDPqtjcg5BNK6lRguvwwOO0qb2s:PFJ1G5vSaWieT5p7q1NK6lRguvhOOws","tlshash":"25c2f81a3286242849631fa453df4b09f33261d564264988f3ada1c76f7cd6e31bbb7c","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.60638Z","times_seen":1735,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-3bd464d9.8440b3fa.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-3bd464d9.8440b3fa.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"11692-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11692,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11692), with no line terminators","md5":"ced34c7faa128636520fe4d2d298e7e4","sha1":"7d035c141cce4fb26d49cad69eeff3212f1d0602","sha256":"c3c48630aa9eb73dc3976661849a71558ef8e14194023114ba0d4687cc2bcf0d","sha512":"0a4ab855383df08b00903fea88cf58b014547ad375eb8fdac46d60875e21fe8c7bd67df44737ec39a004f70722ed84ed37b6bed596521052f11c2c3003b0ff7d","ssdeep":"192:l33sODCMSXc6xJ6gCA95PR906An/fs5d24uiYFGRSVj+4ceWm:lnsAKXjxOMHa3EzEGU5+4ceP","tlshash":"bc32f84eb0bae6bc889b00213016637475757bd5f00848d9b3fcdce89949ea4232b73e","first_seen":"2024-06-19T01:29:39Z","last_seen":"2026-05-17T03:11:11.738061Z","times_seen":655,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141579,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0ca7414ed5d174278835856bf5a30b3c","sha1":"ebbb71b8a7d9714d512c0ad724cc9686d5e514a9","sha256":"4b45a45ea35b014260ac1f7b588ce059a67dce19b224ba13e0a6dcdaf32a4b69","sha512":"59576e09739cab7d0337157edb9b9449a0637b44fac46e96d4bc3f9dd16088a74889edea7b226db3c096b6e3b7e22aa05671544ed40fe61ba8a31a8b6338d04a","ssdeep":"3072:v4aTW3qf/4ushxN+kA/qAgnlxIkmCPSaxuN3jS+A8gZ12/EsD8qSc:yuSsl4qH","tlshash":"19d3e953c79881350f6801a544173b6e94fd821baf734f95ae3cee387aac8f6766508c","first_seen":"2026-05-17T03:11:11.739007Z","last_seen":"2026-05-17T03:11:11.739007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: J7m/wZ+XsLGtZf0cBVtohEKy6p61ntMM/3HBVWQXGgpHmfIlq8JNFnsWvGmlejycI0N0mvQQtPA1Euris3MrP+9pak/Pr5yu\r\nx-amz-request-id: ZE5AH5JAE5W8300D\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"d88ae54a30fed8843621233e2c13698c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 20191\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":20191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-23T06:19:40.714677Z","times_seen":9859,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":902,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/a7892ec6-7c9a-4017-92d9-5d88ec058706.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/a7892ec6-7c9a-4017-92d9-5d88ec058706.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0D3EKi88hP7Ei27fxH6ZTblzSyelx/Klnlxr2pilaqk3Jvf4HT5S54QX0RbvgPABEycigmS6qoo=\r\nx-amz-request-id: X23AJQ7X4Y3VGCQB\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:31 GMT\r\nETag: \"4733341abffafac1a80a87d73b929a0e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46462\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":46462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x816, components 3","md5":"4733341abffafac1a80a87d73b929a0e","sha1":"2ed57cdd64866e32ea7315eab53f957943fe7535","sha256":"488b95a8657fe774d74f2c2b03f858888868a277580ae75cd4c45796bccd447c","sha512":"e1db1ff22f5f486ba861cbf7e2e6cd4c701fb2610f9049bae3e4112f7e359d8073e7ada5c955122817689e00b314a5bbd465b325c264c277ce73c2ee61a67c48","ssdeep":"768:1Z94x5KIpQt3/N64yyRimzuVWddwpQairYmoxTWHoJvtBy9ZsdVj9hLvRH/pVexD:n943DuRLyWisu75iRYTLRQsdVj/LJH/G","tlshash":"032301f73328b9a2cbda05741372f6a03265f93716fcb6024450fa70b16c552f598b6e","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.465469Z","times_seen":7573,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":491,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Z2L2tIcGFnhcPxXLkfYbxHJFX5clHsb6YudXuveZG/tuF6zm+xDCAAp/YwaarimKu+iUSXMT9kM=\r\nx-amz-request-id: X23ERA0CJ1EBN4N5\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:09 GMT\r\nETag: \"963cb56e987f75139a4206e2853821e6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 234396\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":234396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"963cb56e987f75139a4206e2853821e6","sha1":"ce71e1769f7261cd7b9a24961ad20fb7a59020af","sha256":"ca1da66523d750de307c04335a1c1c6a4a5984b6e18740d6a9b5d05328a83eb3","sha512":"32b60068394c931060c1753e698783852cf5287a33a02520531964297d9f7c9b2a075a104400d58371a38b39e90f79349952df52f99ce456d4a43da248fba813","ssdeep":"6144:hEAd94lqhbTQUovlU065PNq7FHQpTmsx/:hpd94lEE/Nc5w7Fwt1","tlshash":"de3423f953a91d48d25c2b303153934d7ebd68f3ebe22b319440240b0efd590f55a5ba","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:56.062403Z","times_seen":2472,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":556,"dns":0,"connect":0,"send":0,"wait":107,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/9a213d9c-85e4-4845-ba6f-92cdb3aadc7c.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/9a213d9c-85e4-4845-ba6f-92cdb3aadc7c.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ho9KcAyDKWqS7ri8hMPS+JaM4bKLnu7LABgOO28t/jL/e8eT1kxzyG5+7NNWQp9CnheUKfFV8Ns=\r\nx-amz-request-id: ZE588AXESAMTE995\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:01 GMT\r\nETag: \"79f3749e1ce4bf0c9b013f036b12791b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 214318\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1492, components 3","md5":"79f3749e1ce4bf0c9b013f036b12791b","sha1":"2383c153836375b545a5a5d7c0587ce23bbf1785","sha256":"516a56ae2089333d31ff7eef34b9942743c8b077a55dae222d567e90f58b553d","sha512":"e162bb540582b4bab16f6a0f6a72904ff3be287a953d66b4d02b5a63378ac09a8f932ea9df364267c7b2bb91f64bd11e7425b116285cd82c063f6929b744ccf3","ssdeep":"3072:Ho4OmbHzuE6nENQor3/n5uuZYsV6ilOAn4DJfBg0ThTGlPVjDLQ8CBPMDY:IyUmb/n40iilOAqhTBGZOCY","tlshash":"e22412d80f233e94f604b131c79d339d1a3af6e7b9e70672790699921c3886d3e513a8","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.530286Z","times_seen":7315,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":661,"dns":0,"connect":0,"send":0,"wait":121,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/0d5a21f1-ed79-4cc9-8779-240cb4bf5732.png","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-21/0d5a21f1-ed79-4cc9-8779-240cb4bf5732.png HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xp+JeAYc72YGWFknyVWjVaCTPnwMCWsN+JW5QVoK5Ns+36YZzrDqTjcKDGftCvh80GgQxwumw9I=\r\nx-amz-request-id: JPZPKA0ZMKA0D3C5\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"7175102fc4616889be030062b226e3a3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 67611\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 265 x 227, 8-bit/color RGB, non-interlaced","md5":"7175102fc4616889be030062b226e3a3","sha1":"be71c0c658b31579b771392f78bd595d79736263","sha256":"514fe41fbd4810bf3f4c32bf00fe1a52b3c8554155f35522f273d07e2efe573c","sha512":"d14997044494b712da27781a9d0cd05e21eee861e125c176c5a114cce3373f6ad0ffc0a25fc4f255b9f57119e8a67f812cfe332f5ee4ad249474f756b01b4d78","ssdeep":"1536:bHy816ssKdZahzOGNATlKjrL17FlmryIEbywHhUZ9gX1pjoJA9Rk7P:Dy816xKdOyGNATmp9TryDqdo+fmP","tlshash":"c263022203e5a5ff5bd28da8fefd4320648900be1d5d4d7ac642cec4bad7d26426897c","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.766337Z","times_seen":2306,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f2601622-74c2-44a6-bc3d-374575d12a95.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f2601622-74c2-44a6-bc3d-374575d12a95.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2GargwOJdr6a4JpocNLpV0RVOZdsDOCHSe+5+rLEWGIDSz+8JLMiNYwePi4PrxtJUQTmK1GXEe8=\r\nx-amz-request-id: Y8M73SJ15NTCNSF8\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:15 GMT\r\nETag: \"f383cfa9adc0f43a8d0f56f57daabda7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 99197\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":99197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1177, components 3","md5":"f383cfa9adc0f43a8d0f56f57daabda7","sha1":"a2adc9d3b604386fee5ea6bb568c6e41c69e4dff","sha256":"2fc0a2e5ae1154c7db96eb4655ec0fcde8dffeb5a28805dce81a404fa5273b0f","sha512":"8c6abd4a504f6daa7777784dbb85ce326bc360eae817b37d632d238b62cbb0a53b5cb871ae153b6919d3a665ae7fa36c804e887a649efbe3889c9a854b2eee30","ssdeep":"1536:U4yqgb8EHMzbUJYXohxfnXAYEb1DHdEClNI6aTUtOE78yByKZmDwMuWxCUWgr/8D:Ujb8EH2ESW9n+E8NI6wpyEKZ71YCU38D","tlshash":"d2a31327dc05a180c5f514fb03eb8cbf0a6d1445b9ac985ebf06c9e27097a96cfd9512","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-05-17T03:11:11.744637Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-3805cfd3.f935cc1a.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-3805cfd3.f935cc1a.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"11290-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11260), with no line terminators","md5":"21e82202aba647884ad14cb797d00ab4","sha1":"aaad2ecd4484acdca83b8089ef896a9748406b34","sha256":"6f49968fc30168c8cc3c2095e8b8251b87ed92f880c23666c7176fb27c92aa3c","sha512":"57e0cb05818bcfc0679dbad25a9ff0dec18b7a1f3512f50c4046071ceb6460cfd25010d0b9ade668a4e96803e195556662722ba4e1db3fd1ac7bdaeba721e5ab","ssdeep":"192:uVYthRrXBronDsE/VnwkvHEvPXwVs5qtwyO/3aQ5QQY3tO/sC4V/5sum5XNgiwEg:u0X6Ds8VweEv/lD/h5Qf3tO/sC4V/+hI","tlshash":"d732d68c3591bcc90a27b0f6b0ab7456b0558e91640d1942eff488ba3eb7d6f571332b","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.459574Z","times_seen":643,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/img/TikTok-Wholesalelogo.e950f9dd.svg","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /img/TikTok-Wholesalelogo.e950f9dd.svg HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16754\r\nvary: Accept-Encoding\r\netag: W/\"16754-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e950f9dd95f7e35a47689e326b4ab705","sha1":"b61ccde4a500eda0a64889be7c7be522418fc66b","sha256":"e7eccf7c2cbf97ba908470ed7a50927dc92f16b67e5b0351a621304b79d30dd9","sha512":"bcb19d983391e92e9b26d920ce17437872dbc1ca3b72e3977184fb965c839f505003aa3e0dac1eeec0ab2ca623db0c45384ac4f340fcac6d464f38a28672b6fa","ssdeep":"384:ZdHd+OOxXUX6KN1EnUqro5uFwPAjplAS6hjv/n9VkgxO:ZdMA1EnUqro5uFwPAlWv/nJxO","tlshash":"9472a7c8377a92ecb4c0f7fb5762a4787851acd169168564c2a51e1eecc082c1ee9ce7","first_seen":"2024-04-30T16:10:46Z","last_seen":"2026-07-19T16:24:13.458987Z","times_seen":1279,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-24e95abb.b2e5197a.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-24e95abb.b2e5197a.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 447\r\netag: W/\"447-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"921bce4f483b1f08e93b4216d27b47de","sha1":"b4a29f334d7440c5b2f40841216224b72c6fcde9","sha256":"66b6628c502e0ea0445dc0ae31e229f358bd8a58aaf06e4eb525757fea64d439","sha512":"44e70871a7b43d640237f9f6f070c10a7bed3b3256e548f42488214ac6cd1421ae2209822abbb46e4940081e816f71e92ba2e6a658d1118cf5e3a9f8e7537240","ssdeep":"","tlshash":"f6f0ec012cbd95a15837c53df1c233b42e20369f0206c7a2ac44ac54c68ba613a14201","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.334237Z","times_seen":7244,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +G4u8ZN66fkbACcBlc602gNjzkoUsT1Q5dHFTTWbcDwDA1C0TYGlMqctEJ2c2aQQw1/B8NLhfDLIVAWz0ozS1C/76GfPaBNN\r\nx-amz-request-id: X23FTHD75EDKT9NA\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"e1d0a17b2eb5865bccc7dff6330f6562\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 147078\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-07-19T06:15:01.547182Z","times_seen":9391,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":696,"dns":0,"connect":0,"send":0,"wait":118,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f70eeeb1-a83c-4724-bd3e-7c6dc72637c1.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/f70eeeb1-a83c-4724-bd3e-7c6dc72637c1.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: J5QB6DHfLE67bYtPfvzZWkm/ziXLvx1CupboCOB5iDezwJFuffEWtizMbu9ub1hvZr7Yi4DGK4w=\r\nx-amz-request-id: X23DHJA17DCVK13P\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:25 GMT\r\nETag: \"c37d660217f7d4c257006d2042c09e5e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 53094\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53094,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1326x1393, components 3","md5":"c37d660217f7d4c257006d2042c09e5e","sha1":"ea529657eb74db371f9a05e1c3d720cfd06c11ac","sha256":"ffe20fabb47fca3b0a55a877370f03f6168625efb804473ba88443d0e0513a38","sha512":"e7dea1d699abd674bf433eb4a6896fa8965b448b59361912ed8d587cfe4064471572162570a9080ecf0c20c21161b10507e386fc543116bd3a58e99b788f7a21","ssdeep":"1536:UYC4y9UKjX6lny922L7cDHc93ykbqdhVSbnm:U+kNwy9xfwcskyVInm","tlshash":"f933f18383a0e8d1f1cf6370402c9726e5cae52193f7c3939a1ece057575f997e52494","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-07-08T23:25:03.455603Z","times_seen":7671,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":214,"dns":4,"connect":95,"send":0,"wait":121,"receive":98,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: acyVMQVK1Gd+xz+UCKX4LQi+n6yIE0TAya3e+C6DKRNirlnWO7Qt7ou6L97ahjPnx5jdGuVZokY=\r\nx-amz-request-id: X2349MTXXDEPGJD7\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:16 GMT\r\nETag: \"b8913d9e5154ba64e3fe7bbb1e357d39\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 115039\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":115039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1214, components 3","md5":"b8913d9e5154ba64e3fe7bbb1e357d39","sha1":"099900879ee6c6ffc46886c6c7a51deb002620a5","sha256":"323c53514398146cf826ac3c7492cb33fdbf76048efb002dd7245cac6ac00de5","sha512":"1b3d93f1860985cf5a4523f0f637f212b67d23dc4083d74b905209fc50179efceef7878dc86d5f0a19a3e8fe499a5989dcb47f76445872f1551296dda4935dc6","ssdeep":"3072:tnAsQmUqLtgMVlm8Bq1u7PqMQq8+5AsIBYbu2ILf3rQX:BAq5SYlVg1GP50qC2ILDM","tlshash":"eeb3128b8363f8c8ff17a0b56f84b712e516042539b136840eed1614e27ea6f7d47e51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.954153Z","times_seen":2443,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":549,"dns":0,"connect":0,"send":0,"wait":119,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1WNIH8gRfG7rQx4n2vuD5nIXVO2nIpA0h0bZGBX90mx44i5J0g+Dx6YVMcdlESHmYzO5/gctz+o=\r\nx-amz-request-id: ZE51MD5MADNVFPWA\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Tue, 21 May 2024 22:38:25 GMT\r\nETag: \"d97df150aeb10281fef09028e4d07108\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2\r\nx-amz-meta-s3b-last-modified: 20230414T110922Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 414495\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":414495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1229, components 3","md5":"d97df150aeb10281fef09028e4d07108","sha1":"a7606a2e5b733d842b2af8379dfdbd82c216311b","sha256":"720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2","sha512":"878e28a4eb570611bf54e4287cb7ff3cf5a039ec4459d4364bb632410fc0e182941f7120f2a9b6852732a68d31748fcebf9a948e656b87eed226b8f9cb4d284a","ssdeep":"12288:S5A9jNzghSx78Ew0WXf/sJStZ50HN2kYH6aXvFhI9:S5+0ynWXnsJYzo2kYTXvTY","tlshash":"db94238d1f8ec82ce01f6db3bc6134d0112d2fd97659dad5dae56f46005e2a49ccf2a8","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.953407Z","times_seen":2431,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":658,"dns":0,"connect":0,"send":0,"wait":111,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-78328792.1a94a034.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-78328792.1a94a034.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 428\r\netag: W/\"428-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428), with no line terminators","md5":"839113b3a06297a1185b208299520527","sha1":"df67e42e507fdf888b4f0b1706a0bd54e09763ff","sha256":"ae7439473b984cf35ac3a8199ea3a3ccd8c794d239d0e36fec25cd4a3f0222ac","sha512":"da16c62f7431636915bdfa092d4468b66770272aca96b2e4c27d1bf9cd36b044dc03acb199486e709a3a82c272c9ab6ffe79305e116376d596ec30e3523dbf6b","ssdeep":"","tlshash":"2de0a0a051072a3b2563f0b6a8c20427b655f7abe91291107be305092e7b38a68373e8","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.363745Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-dcbc024c.a343950e.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-dcbc024c.a343950e.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"14312-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14312), with no line terminators","md5":"19d5bbc6c3cabbab89a3a781c074b28e","sha1":"b2fa8e3d627d51e5cba20ae67b22ab5529da6ce7","sha256":"ea9c6ab60f3db5dbe800198113115ff24888d8ee0d65b9659278f4f2f1e854e4","sha512":"0af8f88d43ce4c3910b486ca94c4b25caef3e72fcb27228ad214599f9492276683431c65fdfb4b98d2b0a850ce0d76342f384265f1900ccb6be948bfe5cbe60e","ssdeep":"384:iE4f6m/3oAgAWyC341+qFkV0vD5rw/CVFcjSq:iE4fLALAY4EFaDm0FcGq","tlshash":"3652e673b424a935b9f796697488d4ce744ad813c25783fdba95b12dc0c72e31ab034e","first_seen":"2024-06-10T00:09:31Z","last_seen":"2026-07-19T16:24:13.422362Z","times_seen":903,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/app.e69ee347.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:51.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/app.e69ee347.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1381418-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1381418,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64230), with no line terminators","md5":"adab7d61fb27bc7d5f3afbc13c89f59a","sha1":"f984d2b280494fef16d92028dfa392a47851ab43","sha256":"499c7b2f87ea71cc702b811b3dc913fe74862ea0da5612e9f295377d385d9ff9","sha512":"de6d1380b0b11487f973826500897eec72219a7222b152d7289bca382faf5c954885777de573c2c19b3d43ffc8f2dd108c075c336d7f81c0c262e262824f4c58","ssdeep":"24576:QdGDd8ObXh5yMU9W/P3CUtLzT9HxfUZO23ZkxK5Q+4n69cEdswB9LRbWxQ7BAi9v:aGDd8ObXh5yMU9gPFtD9H9aTpFC+AXe1","tlshash":"b6558def67da77fc08545646a04f7975219c1cbafb96f0e008ecf61922e9e408213f69","first_seen":"2026-05-17T03:11:11.754345Z","last_seen":"2026-05-17T03:11:11.754345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-080bb2e0.615f6bf6.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-080bb2e0.615f6bf6.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1594-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1594), with no line terminators","md5":"7bb68d7264949b255c669843ea227988","sha1":"c37129a7f0dbda018bd10436c4812ca558ccca03","sha256":"e1e47844c3390d548f1cd51ea560bf6301ebc6163228d4bf728cfd0a10b5e70d","sha512":"af29987a4411e45d99202eed3f1ebb777ea971e2b4eb617f4232c504c4f83b247c6e6651bb83c7dd153a19306a521a1e4ff6e633c6faf12308f1eb631623f7eb","ssdeep":"","tlshash":"3b31761e3e491d18f833f71f21c24a5e3212a37385b6831a7c43e55afd470c67ab12a6","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.368662Z","times_seen":5573,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-05-16/576efa67-81cd-428a-8bde-80d57cfb647d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-05-16/576efa67-81cd-428a-8bde-80d57cfb647d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QvCyeYhX79Ya4xJrRdtP9pXIe+Ff6r1RDkdCOFxp/6KwRqEZPJWKNEYCCc15Yio7Bz84HfbcggmgP5orKDN3TAqOuAMk04H9\r\nx-amz-request-id: JPZRJDPE15467VEC\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:21 GMT\r\nETag: \"78fed38df6c4b0312d8a91c509beafa5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 157843\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":157843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"78fed38df6c4b0312d8a91c509beafa5","sha1":"513703e7631878f7bbfc8e7c73781e316c87335c","sha256":"fd89c86a8b6a78742cc14d754a5fcff661630041af1d6ce07fec8d5daf63d30b","sha512":"e27f66edba14bba4453b5487a6a84866e8bf142b415cc45ebd1dbe2e564f996e492f969605180cc7ffc1302bb919a48840d66b9aac7d892d5448a7a285fca320","ssdeep":"3072:iuz5VdowoflxLEZgd+4nwSbKKPteFg9g4/A6wfhHHNIqN6HECQ5fX4laFxo6:rzBowcoZ/zote16wp/oHE31Xyy","tlshash":"c7f312d5f2019331d7a41e32d4ea9bbe016157efab47af285a80f83d0c276b1b8d9056","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-06-22T12:09:53.89714Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ba21b1de-1bd6-41cf-993d-cbf59051931d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/ba21b1de-1bd6-41cf-993d-cbf59051931d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: VxtclrC84WdLbd5OCNLr+eyWoGr/CT/hwWwGcs6/bL3wzRZFqCR4NnYIytO0gYpy4id+PrnuJzs=\r\nx-amz-request-id: Y8MA2GRDJ1858QFN\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:12 GMT\r\nETag: \"bb218f576009cd83b9417c5a229c3203\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 47710\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1468x1500, components 3","md5":"bb218f576009cd83b9417c5a229c3203","sha1":"77dff04586788827f80934d71f78f4c88f8356df","sha256":"d0855f819cdc09557f7e383dfbc5e6165e09a50668d15dfd0210949bbdaaa17f","sha512":"7f485bcdf0998dc22d4c9737db92c707975451d3f002fd09c92f23261204700dc22f93182ebb67e07f99d78358027eaf008a78bf02935f590589defab99e918a","ssdeep":"768:1gD/OoEUQEXCRL2xwGC5fTS16JO8Rb5fu5BPqETeaHdQ1DIzwOhLTKh:yEUl+SGGCJTSYJHb4BxTeanxhTa","tlshash":"0923f1d3174348cbff782937b4a153a3677ba5ae219594b3a70078275a423386ec42d7","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-17T17:41:48.618725Z","times_seen":7175,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-6699a1ea.cd704402.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-6699a1ea.cd704402.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1252-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1252), with no line terminators","md5":"b50aad23d365ccde72e78b8313b4e7c2","sha1":"82e1ed3080ed69d8b4384e17044cdcf837769a03","sha256":"e36128c4817614792876d24a43ab454dd8cdd52f66965bb00f14406da9011f3c","sha512":"3929980e42defe71e881ffa97bf69c5d70251a4adf0eaabc203dc87188f3d9da61887ecf8f793b9c6a2861a6b24484417bd3adc1cd46a41cf2a0f14082f92dd7","ssdeep":"","tlshash":"3f21ee67b51163ada3bb689413b29c8c7414c840f5ebebfae906411dc7c72973691388","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.522312Z","times_seen":7301,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-ff2fdb80.d40cf9e6.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-ff2fdb80.d40cf9e6.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6600-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-07-22T06:11:18.43744Z","times_seen":5421,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-78328792.e3aca6c5.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-78328792.e3aca6c5.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"11749-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11749,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11719), with no line terminators","md5":"5c9656f254bced4b277436e1a2caf42e","sha1":"a34987037283e53876130f3b0df19f443dcdf2e3","sha256":"e53e48bc9151a28451d0f20cb612b5003f2ea7477903a6526787cc49b10cb5db","sha512":"df61541864050971609ddeab0fe6781d14c80aba7d22b13f8f96d9883a77628ead9c089f5bfe82b6b7dd185da6b030335b20e36ddf860c4bcf99fe0f3eeb93fb","ssdeep":"192:6VYthRrXBronDsE/VnwkJ3i2gv419Ii15QtwyO/3a3O56QY3tO/sC4X/5dum5XNm:60X6Ds8Vwcgvg9Iat/156f3tO/sC4X/G","tlshash":"c632e78c3591bc990a23b0f5b0ab7456b0968e96540c0542fbf488fa3dbbd6f5703727","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.485077Z","times_seen":639,"resource_available":false,"data":null}},"time_used":2222,"timings":{"blocked":0,"dns":0,"connect":0,"send":1148,"wait":523,"receive":-1,"ssl":551},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-a481f6c2.64cc768e.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-a481f6c2.64cc768e.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"14485-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14485,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14257), with no line terminators","md5":"1a72cbe580135f8ec5087e5e59214d10","sha1":"ce6547fdf348ffe29527950b7d3b12d5ff64ba14","sha256":"4dc5f3c01cd498ed033b78802b6e2ec41470dadf8f07494e569c9af89c1db453","sha512":"468f14c95e8224a25df0a664966637472266bf79a7d0b7b7747da27b822b56f6890a9497e643e29ce3fe5e1da836c3f0f7343024fa7821a729944b5e376e3f59","ssdeep":"192:+FqTB1LPDWzU/q+1mrsvgKHoBUsnyHZHJA6QXfZH+0BMa7YHNKnZgQm:NTB12zUxAruHotuFQXf8FpHNKZfm","tlshash":"7b52b68222ba385e5756218230eb2580a17256a5280e94eff53dddf6b3ccc247d27b77","first_seen":"2025-04-10T13:02:15.7815Z","last_seen":"2026-05-17T03:11:11.760431Z","times_seen":416,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-000dfe6b.148f433f.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-000dfe6b.148f433f.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3625-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3625), with no line terminators","md5":"5d856ee88b3591842edc98f9c697f3cf","sha1":"cb39f87682c3d0cb789076a58acacea774b0a90a","sha256":"3e0f75daf2c30cd8230e8779aeaac9189afd0b1aff1b50258a0851b0ce65469b","sha512":"177ee54cd06fc29040f182c2a2a37eb7cb2664d9d250574ec4e8f428042ae59affba129acdc053c6e49c28d55de0c76a61188ee92f6c9f92846aa21deb3c1694","ssdeep":"","tlshash":"4e715b11ba3d62f8f426c11e6a46984d7711f117936f84f6afe0d47aced3a123b3019a","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-06T01:22:22.673816Z","times_seen":4473,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/vendors~app.e68c9730.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:51.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/vendors~app.e68c9730.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3556889-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556889,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14507)","md5":"848a37338b24b4fa65006a159c5f2832","sha1":"8f11219ea63c241e2544e5f31d246e65ffd55ba4","sha256":"aa9209544f04e0affa6dc41d0a43582879bcc3dc397e0a86b60ed30c1b6ce1a4","sha512":"a882544b25a37e6c2a622c5712d83c0434369fec4c7d2c6e57fa63151ebf43c1274f3fe8b8c6c65db04e55ccc5dffc5fd583200400cfb0d38c47b89a80dda700","ssdeep":"12288:wYLFcwkbVvGphhAiKIgXwfWornIdZLRJaOLhQnwkZ5lvz1JT:wYLFNavEhNKVoWorIdZ9fDkZ55b","tlshash":"123519cd7285b46253a371b4407f240bb33a2959680e8458f665e8da7c7da4e633bf3c","first_seen":"2025-07-29T17:17:22.139204Z","last_seen":"2026-07-19T16:24:13.417179Z","times_seen":259,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/c5a63bc0-28ed-4a64-9e72-b58af5897c43.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-11/c5a63bc0-28ed-4a64-9e72-b58af5897c43.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: B0ar3nTxxA+fRk8LuExYwyX+tQkWHyeCtwjZngWmKy8gHln6wXU3jG+rdzN569zoT+IGMpi2GBbwJ22B23j6Mr+MvcaToWCV\r\nx-amz-request-id: ZE534MB8DG13BN60\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:10 GMT\r\nETag: \"d85cdd88cbe7726f1f354bedbb0e0705\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 113686\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":113686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1258x1333, components 3","md5":"d85cdd88cbe7726f1f354bedbb0e0705","sha1":"99a01bf50cfb668fd087bf30fb597e44f542c8ad","sha256":"0dd206e3bf18b10a0aef408e1f7576894ea0e4b5a37098b3c13df3ca89622975","sha512":"15a88ef4e0751ba42bd64868162e830d7f7b37661438640dd9104ba9589f2595c531d4124d6f0bff37db1b0e44871eb91cc1f28dfd1f27975858bdb5bbb8d92f","ssdeep":"3072:6NE2h6L9TpBzUbO91POsKx/vQzh9wG3+V9BXEJ:6Nitd1PuxnQd9wsQ92J","tlshash":"43b312cadb8f23d1ed8b8179d60146b2735f27ea167863fa0b616d763a352c110cf458","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.529471Z","times_seen":7626,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":929,"dns":0,"connect":0,"send":0,"wait":115,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/83ac7d5d-fa38-4678-af79-63b4066ea171.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/83ac7d5d-fa38-4678-af79-63b4066ea171.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0gpBdsWKBBdPPzO08K+tuxHH/r3ul+0WjmzGc6NDNsENlpNb6hEF0kJ63gq7d5bHImlFASNsUvo=\r\nx-amz-request-id: X23B9WGPQK1XY7XE\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:12 GMT\r\nETag: \"7fac67ccc5152addd1ee354754ded6f8\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138263\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":138263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1448, components 3","md5":"7fac67ccc5152addd1ee354754ded6f8","sha1":"76a721dd33cbe5db8b2b88cec77411504ecac3a8","sha256":"793dc1d79d43111b0d0f51a97639335a2e3b9e183fccf7f9977d4ee211f0abab","sha512":"5838f6f3db5cf29c41bea30d3ffa90a3fcb6621bf31b7ced36bfe2a5e7e9b73c1e3ea4704eb410a18d7ff851d63732f9946f8b5731599ec4ca99842cc5b0b944","ssdeep":"3072:/P49i9HHzuA3rNAKsr+2cStuOt/IaQnNuq01y8e6eJwfNNJaJT:/aixukN6Clst/IFNzP0NNJWT","tlshash":"c7d312fd4380ccd9e222a971610f53ace81735f209889d815b6df9a6f6512b4ffc9a12","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.384256Z","times_seen":7559,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":117,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/60bcf681-c939-4679-bde0-509eccd7574b.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:57.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/60bcf681-c939-4679-bde0-509eccd7574b.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: W4jjQ+5QX5zAqsgcpjRgycMZQstctmRrhIBQ2PYsEoFa4P9dQOduQ4+x9glIq06LbnTsbudQegU=\r\nx-amz-request-id: ZE5CYFYZ2BV5M4SC\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:56 GMT\r\nETag: \"ec86b66965224b96bab443b8410395d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 146526\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":146526,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1306x1476, components 3","md5":"ec86b66965224b96bab443b8410395d1","sha1":"53b8c9b7a8a7aa82d70fd8b4ec6e3cdbd2ef37af","sha256":"4807823160aae195643949285d31c04cd2748742c243cf1ad55e04cf2c302d77","sha512":"ec04ffe990fc2220c95fd2ad387d62989ef863818ad9d26b0240b4c9130c95c537ad457b16d3e654302a2a07aabec6e6a9dd1b7a64fe613fa44e28e007accefe","ssdeep":"3072:4nGWpQdBtg6vmu+rXVV2xOxairAYONXsecAyFdBo8ZoWKv:iGWMmu+RVAYOPcAYtmWKv","tlshash":"5ce312526f51b006dbfa6c31b59ba629dc31a007a34398fb782d4638f8d73de7749281","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.457369Z","times_seen":7266,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":113,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qmKDMpODd6jHeRxFo1SSpCerJcGAF9FU/+wZsA8hIVKV/H0PyOJ/sa5xgeOod2NX07TI+H1g7Og=\r\nx-amz-request-id: JPZNWDDSG9PRJYPN\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:38 GMT\r\nETag: \"2496b5f58efde072ecd0bce81fc5fa81\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 7351\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 274x184, components 3","md5":"2496b5f58efde072ecd0bce81fc5fa81","sha1":"72b0ff43dab1e217b2908fadd5e39e2da7b28aac","sha256":"ead216638492bc0d63a4bb42e9b8578a8366d37badb836d2be2f65c1a7066449","sha512":"d6bb1eb21f108053f6902a0782c64e79ef9306f15c8bdc040cfb838080912b87c7bc33b2beaca84224b4d513d7cfc2b9aa504a01ebddfb95278e3454ce79f870","ssdeep":"192:vMPMEcgpqpBB5HJig5pfA2ZIeM1lDV4SAAwet:DP7Bri7apeTaTs","tlshash":"5be1af61c1396716c8d57ef7435e3a234f09e809231ca3b2d71a32ad8b0319caec3a25","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.864987Z","times_seen":1977,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-f43bced2.d5f3931e.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:03.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-f43bced2.d5f3931e.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:03 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"9713-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9713,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9679), with no line terminators","md5":"6538bb88d97a8c64c659278beffc0bc2","sha1":"0f0d75304ae3bfed56554f00f81a2abade861db8","sha256":"415b39112fb225a9a5d53c841e5bccc94c76a6e4b8d108f9a56407eeab3044e5","sha512":"2fce567f174bf5ae92678cf68f93f94ef00fe707eb9a61ee0625de2f42ba68bcd700d8204df78509a55d7ae690042faf711d9c2befd4c4f81c1ebf636bd33b8c","ssdeep":"192:bE6pgpvwC6acMPcaJ6VHPqSSC5DCkf5XdI6k:bbpgpvgqsHyIZ5k","tlshash":"6f12d9897b92f89e8b6721d4706fb417f19626207c0d16e2e238c8f63a68c1d6353736","first_seen":"2024-05-31T07:14:58Z","last_seen":"2026-06-03T23:39:34.582996Z","times_seen":2067,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-dcbc024c.a343950e.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:54.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-dcbc024c.a343950e.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"14312-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14312), with no line terminators","md5":"19d5bbc6c3cabbab89a3a781c074b28e","sha1":"b2fa8e3d627d51e5cba20ae67b22ab5529da6ce7","sha256":"ea9c6ab60f3db5dbe800198113115ff24888d8ee0d65b9659278f4f2f1e854e4","sha512":"0af8f88d43ce4c3910b486ca94c4b25caef3e72fcb27228ad214599f9492276683431c65fdfb4b98d2b0a850ce0d76342f384265f1900ccb6be948bfe5cbe60e","ssdeep":"384:iE4f6m/3oAgAWyC341+qFkV0vD5rw/CVFcjSq:iE4fLALAY4EFaDm0FcGq","tlshash":"3652e673b424a935b9f796697488d4ce744ad813c25783fdba95b12dc0c72e31ab034e","first_seen":"2024-06-10T00:09:31Z","last_seen":"2026-07-19T16:24:13.422362Z","times_seen":903,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-07-23T06:19:40.755081Z","times_seen":6199,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qMxCNkCa/8YMP1GncjNLORMzjrMuh96+u+yl3g8DlaxxaBOv/smSSHEmmJC4Q0pc1gYgNG0OZERn+ortv9kbuHUeyaHzajQC\r\nx-amz-request-id: ZE59MB9DQ288EY71\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"dbb5460537325e381060d6a696bdabba\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66319\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":66319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-23T06:19:40.766995Z","times_seen":9912,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":895,"dns":0,"connect":0,"send":0,"wait":119,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d242b41f-a56b-4d36-86c6-d91b086f2e80.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/d242b41f-a56b-4d36-86c6-d91b086f2e80.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LxxB93mVHG/SAW4h9TRAHzrWjNC0AuYI0og9SsaLjFFchJcPT+EMut1WdXRhpJ/p6UYmngV/H3E=\r\nx-amz-request-id: X23640KEPQRDPGWA\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:04 GMT\r\nETag: \"9eaa232e9d3003f7a969175be379afca\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 97622\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1095x1077, components 3","md5":"9eaa232e9d3003f7a969175be379afca","sha1":"64d4d553fc1340b9d1e932e111c6059f03fdf5cd","sha256":"3219dde1f8200c3350e1a01e6d83e5840cf68f87e27e901ec9c77275021bef14","sha512":"f5d2569f4ec4273aa4872652759595e4f673ab811ea934cef5787a699b324dcdce5e08b3a0e01598109b1bca4fb9fb4d53924a622aa313cfb857a55c1aa4f18d","ssdeep":"1536:g3RruCk+XBAvF6JUyCUW1SBzuAN6dv4rhX2YKk2NY65QQ+nXjuFebpIrZlb4CjGj:ghru+RAvxyfW3i6p4rlXcY6aQ+nsUKlM","tlshash":"dc9302bb5ac94169c6cca33399254513fa58c0a621630dffba95db0b25dfa4039c39e3","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-19T06:15:01.502699Z","times_seen":7233,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":134,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PgQno7X65JHdblqR9XfoL6DZpQxTknSPGCh+bw84ID2HJGoOBjC3/8soOxTDcZNNzlukt8Kbe/c=\r\nx-amz-request-id: Y8MBDPD6NK2NH798\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"0cb226a4c24b62a8027c524333a66d1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9972\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x1500, components 3","md5":"0cb226a4c24b62a8027c524333a66d1a","sha1":"bcd930afabd37e41dbff70ff18d3164036810ea3","sha256":"cae70bc988ba3c3472e4161ca54422d0e54923f5b26ee7e7e34716c90c97c2aa","sha512":"0182b799ed0ad9230c5713f54e77dec912e6873d55c491d41e30db98575b93ece455e58effcf4b52a2f1e5ec5638fa27ac16d8319119f1aa3ff0f1fce499789f","ssdeep":"192:1I49RvIJWdElnZFHjjtCcYjtGDCRxXEZJHMcf:1IKRvAZFDj0cOt4CR9EZJf","tlshash":"3f221ae391d3585f9838efdb9b5886e7d82ac355df6a3102204b030677e9f50ce3945a","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-20T07:32:07.977026Z","times_seen":2509,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-b4023030.9621566e.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-b4023030.9621566e.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6183-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6183), with no line terminators","md5":"057fe14e9c3547745c0aa472d4c9073b","sha1":"b30632c21cc5a09d643813846ba35f1a5de6050c","sha256":"fcb115324a9d3f4701274f02a05772a29af8f461602117453c07a0ba99bfff78","sha512":"b043e5b33dc26eab18cada08b2db43bd64199ff6265c07305e26ad3a9389c8c52e1d6d13b8538732ec9406ce64f96cf2a5dfda4250096705ba337f4602150e67","ssdeep":"96:V7MBnp0eZAhzD/wFmwxM3Q7BkyJtFoJU8zNCfiea2dFyq:VFw+NBCfiea2dFR","tlshash":"d6d151132a676524fcbae01e79547b8e3e5cf643d08605bcf85abe35c4c7873b518241","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-06-03T23:39:34.614021Z","times_seen":920,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-2849664a.6778826c.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-2849664a.6778826c.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1176-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1168), with no line terminators","md5":"c1f6cea1824321583cf58a3375f5d89e","sha1":"206891a8409e925947c88e330b9f38a410af41c9","sha256":"236895c2ce8730f34873343ecbf050639720fe26b7969e2cee93a202ef123923","sha512":"ff4bd7a31d74915e64c826fa4c3c67561c3e1f637d7c5734d8a078a5c348abf5844d1b01f84d6466ec7d4f65313a0aae6e6a440b0eb65fb7aa36b5809487b621","ssdeep":"","tlshash":"c721211360a2784d586e6441210e2134f4f09ce64c1bece1a3b8c8f7d2b2d9a3a5f27d","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-05-17T03:11:11.788634Z","times_seen":486,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c4654fa4ff81d11b3c8d322ec628880","sha1":"080c15bfaa6d03e4ccdd092630344aaf1f003c47","sha256":"1f9573c145cceac2e7ec7273293953edd53fd282aca6e50acd9334f59f34a5fa","sha512":"61d2d5a60435f554ef05dcb0e1b1c47875ac6610289e4d3ea66013244a25a7b1b720d3927649ce420575cc00929d9350f519524350066508593ad659aacb79ed","ssdeep":"","tlshash":"b9a012009c155c150c03c244a84d260641c8210246404e180d041928017d43c21000b0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-22T06:11:18.534593Z","times_seen":5735,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5q7wOclmSWiWUUa2ZfNA7C9GHLv1qky69briujMQK07RX/jh63XjDCUUnJW7soMp8vjtMvSxe4Pr+Ns0Rt95ijPZCiJmht5u\r\nx-amz-request-id: X2385G4YXKG78QFM\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"60e10d77ebe5877fc1c9385748e2cf72\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 180465\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":180465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-07-23T06:19:40.777201Z","times_seen":9663,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":123,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eepPYG+DR7bJwF6KM/jhmcWOnMUcstriMqSCRVmO3N2EybfSw/0GZc/te5y1s6vIxHSkIzY0b+orUWKROAXXPNe798JRzIVg\r\nx-amz-request-id: X23FPSK8JM87SK5P\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"74ce2539c3d1d018eb92f94dd3b9bd23\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 40407\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":40407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-23T06:19:40.79247Z","times_seen":9895,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SQxRhnwcWImGBLjItjNbPphK8DvzSNHuKJF00xvou5n4FQgqZU3K3IOyE9qyYdjhUH4AiRHTu1v4GSKZPLZDbExNvx8ZsW0D\r\nx-amz-request-id: X236DRK1PBAG9C8A\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"6a85f34af56b3c034d5137d4ec807895\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 49034\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-23T06:19:40.722588Z","times_seen":10042,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":817,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: l8Wf5Sk5d4cHsIOa7JeF6xM0zm4ECbsVZqGasToyPxiRkfIt3AeWB0XaHoP/G/0ySK9GLYUFWwU=\r\nx-amz-request-id: X23CHWW13RYZ9RYE\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Wed, 22 May 2024 02:33:56 GMT\r\nETag: \"ddcaef2c6aac08fffa6008f8116d4863\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026\r\nx-amz-meta-s3b-last-modified: 20231026T130616Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 237068\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":237068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x1500, components 3","md5":"ddcaef2c6aac08fffa6008f8116d4863","sha1":"5dfd62507f633aa81445a44811bb63809316c059","sha256":"805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026","sha512":"95bef3e1700d32e6085d333d6564db07c4e9d6ca15f68db74153bfd184d8742022929332333565410ac220335e3cc373033aaedecbd28c5f7e9ac7fccc528d7e","ssdeep":"6144:p+zpCBaXboUhv83vTJMuOeo4q0l/l0yBsiaDkKhPbqTswCTh:p+pXboUhv8oe3lBBZcWoxh","tlshash":"933423f5eea10b8adb466b3489c02f21507e42e18d4dacb643f2e76245dd0d8d3ad672","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-21T20:31:55.988593Z","times_seen":2346,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":247,"dns":8,"connect":96,"send":0,"wait":110,"receive":289,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/1bf64a41-5716-4bfb-9f3d-dad3bbd57850.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/1bf64a41-5716-4bfb-9f3d-dad3bbd57850.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1nLAA7iUATg3+asluMG+Two+tkXuQtZr2d96/9zT+BgZGjKSJ8z0hT0reDaJz6GKY4H48imYBf4=\r\nx-amz-request-id: 15C9S3515HTNFV9V\r\nDate: Sun, 17 May 2026 03:10:01 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:26 GMT\r\nETag: \"7443614779454cc0a775aeaaa0617173\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 156716\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1431, components 3","md5":"7443614779454cc0a775aeaaa0617173","sha1":"9ccf2b06ef2d4142709adfd982b64ac0fb259628","sha256":"c820e8cd027c822920b9c59d92e54d107bd10c818e943166d5d5cfd1300bf620","sha512":"f6f53c63141cfcec7a2c77e97dd665fc93d61082607e25ef4e06dbf70de0674b9fec42bbc9056269df298a985755b4bc4d778a2aa94acc15a52da7b9aed4fc9a","ssdeep":"3072:xFLUQwZbVMhPZovwmXbFacwZHIjhunvRy+q2yVLZalHTMZOmB9vqDk+fH2K/Vo4:rLrwXSPZ0wmg1ZHIj8QnJim9vqDLWul","tlshash":"f4e312f6439bc6dbd4a926b6646eced3375100b24f5a84e30812330558c3ba677e397a","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-08T23:25:03.503606Z","times_seen":6824,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":114,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-637414aa.10f19374.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-637414aa.10f19374.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 868\r\netag: W/\"868-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (868), with no line terminators","md5":"c39ca13bdc2f4a622d1e12a41a629219","sha1":"09c1a5d40c3bbb3fc3e21b67c7ca886dff17a575","sha256":"9a0298fbd5163a4dbbe4944f7c825bac109b42227f6dc0d4553b69e701472896","sha512":"85feb07fc68ff6bb6d4646a662e9c7856e6f4781af897e9a0fe47e5a0a6b4560eff90bff5a84f694c5f8350edae14a0f794acffce9ab2dd41a6fa8c8ea3cb3ae","ssdeep":"","tlshash":"b0119cb3a176d932f9332c67374494eef19188e2e6528779fee7690cc08eb539620304","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T01:22:22.62043Z","times_seen":5983,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-a481f6c2.461cae5d.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:00.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-a481f6c2.461cae5d.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1224-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1224), with no line terminators","md5":"8955845e2d8bd64e527ae1135c65ea26","sha1":"cbbf041cc24f594a5c4fe6ffb3e169bbfba42213","sha256":"dd63ea802d717680dd7f4dcf1513959250e5f5a9a4933b656f21dce00cad624e","sha512":"7bb84ea974994dd40ce9b9e9310dce416c19db19f64568207a6a36b019727f705db2d21cbc88002f06ccb56735187bc319e455d7de305eee0cc9990a916b368a","ssdeep":"","tlshash":"b9219041711a5366347ff42a54e0c965f22173e7d49652435db8a0804b8be663b01ede","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-05T08:23:29.876598Z","times_seen":3720,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-22T06:11:18.601785Z","times_seen":7366,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 278lE6Qpdou/cDRSEBLwEPC6pBADuwwQiiAeaZtjKsk1/ZPAJTc5pbr0zXVRPcMOXnKGWYMVFWnpZ5q2Yzmv1WOfF8oIfs8w\r\nx-amz-request-id: X2365E9WJSXVSG2P\r\nDate: Sun, 17 May 2026 03:09:57 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"ad3bb72e6cf979df37c56cc70e70710c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46207\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-23T06:19:40.720818Z","times_seen":9895,"resource_available":false,"data":null}},"time_used":1666,"timings":{"blocked":720,"dns":4,"connect":98,"send":0,"wait":120,"receive":95,"ssl":618},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/b36d2777-fff7-4cec-b168-5b68c3d256b6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/b36d2777-fff7-4cec-b168-5b68c3d256b6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ThWi3UBoutsxvwskqredLTk6hu0ns4QWYtjscxKDMgAbotdd/tlKHEu3BhH7i+dbXZDGiC9cJlXrMY15oyLvuCxllb6nkASt\r\nx-amz-request-id: ZE52BFFHBAM308WS\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Thu, 23 May 2024 01:47:52 GMT\r\nETag: \"2cc7debe43917ab58c294485e5c478d5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 235022\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":235022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 981x1500, components 3","md5":"2cc7debe43917ab58c294485e5c478d5","sha1":"1dcb28255d99596d828673da4d474ff999c98905","sha256":"590d7d4cd7f3fa7833565c83bbae73b56e3fc935cfec091c542e28de866d7d5c","sha512":"71f23f15d8d9054cfce9632c25b2f60aa724b043c2a1d3d4e2032123ba89c99e6c404072d0b2baf3ea13240ff17cbb10942be64ebfd0c5499bdcd82f8eefe381","ssdeep":"6144:kPr1Ds5uJHQbwgOYbprdGn0CUmmqtHFCmH:21DDJHQsgR9pw0CUmFCmH","tlshash":"3134239d3608364dc7685bba017bba565e6cf58048cb7bfa197f3e07199311e61e2430","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.496715Z","times_seen":7594,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":931,"dns":0,"connect":0,"send":0,"wait":118,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-487279fe.3b891b55.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-487279fe.3b891b55.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6261-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6261), with no line terminators","md5":"f3cdeb75b367412c46e17b12e0f77181","sha1":"cb29d501ada10e79fdb9f61c17300a176d671837","sha256":"6d561596b4f729d12c7dba31078f9fa24935ad55226d860347b8762e8a3d8db6","sha512":"18e64412a8f0d5e7e22e03e65b76f3b4c382810ce57cb0e9d14a56e253236adcdac94314bc626e8eaa990c7ea28a47ae60de3b05aacf1e053116211de658140d","ssdeep":"192:VB83M/1UfzEOxr768X/3oFyngdSWLPIk8PK3dFpE6B1lah:4E4f6m/3oAgAWyCa","tlshash":"44d12bb568684c314dfdf9a6965636eea80ee032c50995dc3780772e48c7f8271fc349","first_seen":"2024-05-31T07:14:56Z","last_seen":"2026-06-03T23:39:34.484099Z","times_seen":1465,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/cbb27639-f9df-471d-a236-a05a2c188c74.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:58.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /avatar/2023-03-21/cbb27639-f9df-471d-a236-a05a2c188c74.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a1B0T0w36ZskGmjvvHG4DZPUM48NHxoy9vhwpC/1cVF1W3paT04qmAaOJMsQHXMWizgdb1sNphw=\r\nx-amz-request-id: JPZPA4VFC6EBB146\r\nDate: Sun, 17 May 2026 03:09:59 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"cba16cae5f38f165c609e2f5ab5c18fa\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 56159\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56159,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 800x534, components 3","md5":"cba16cae5f38f165c609e2f5ab5c18fa","sha1":"98e1d7dee3cacce9a7dc0e27f902a770bcf15950","sha256":"3b548b41819c9f67d5d76472dff0b09b0675de098e558eaf78f292b1a8c79d8a","sha512":"b761e1b78ea5bc6b5a4b5d8b4c747c5cfad74c4ae9973bb5ddad0c5b24fcd0765eedad07593d7a9130167ab0241073f3553ff0b10b66d5228979dfc3146b04dd","ssdeep":"768:uDZKKnijpLxWGUlbk+S68BLV750fOQE9UTzssKcclL/xNqKyvGw5KazAr4jNsuP0:uFXnwLdUadz0fpCHcI7jy+w5hzquPzyJ","tlshash":"06430192fa07a827d6d48ace5c2ec88175185ef006f5eea635ec4ecec7c0047b9517b2","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.863865Z","times_seen":1888,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AJxQevylLLdSGX9XpmCwB6RCOCT3G18JkWwxj34FyDeXXYfFdsw/OuPL6dCXLfn89dlN5yH/VpA=\r\nx-amz-request-id: Y8MB4EG72Z8V8XXK\r\nDate: Sun, 17 May 2026 03:10:00 GMT\r\nLast-Modified: Wed, 22 May 2024 20:50:38 GMT\r\nETag: \"755beb0acc47fd21e538c3b25359b060\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138697\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138697,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"755beb0acc47fd21e538c3b25359b060","sha1":"3ea9d8c04dc9f72448f2b72802065cca80a98b53","sha256":"9636ca3c7079d5e57d692b66104fd9c53854c54b9c074dc79c974d52fab6fc82","sha512":"9239457347dd2cc3f21401f59280fa233cf0f74d4d47415112e3666210e07410fabee8fd06346880890d5a0fa1211e3d2754bf6c7b83e7fd23e83d8af70cf2d6","ssdeep":"3072:EYIZstVjQOeoAYzeufLqX99sd9JGjY96eDdlswyo102lnkS:ELuBkoAYaKqX99sd9JDQeDd+wPnB","tlshash":"4ad3120e32b8b5bdeded11f0b19970bbbef5e15a4a830e4e1e8b650a57358457c4320e","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-20T07:32:07.984991Z","times_seen":2327,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":111,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-487279fe.847fbadb.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-487279fe.847fbadb.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"3760-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3760), with no line terminators","md5":"5caca6f74af8585b1f791ad2476ded99","sha1":"c86c7aac3520c54f16d76c79fd0a8f3a2eea39b7","sha256":"492f2e19872ab51ac99636f6dac2fe0c4a7695e66b090907a03fe7ff6086d9e5","sha512":"ed01b316f2c643a7c65a86ab9f29ee5632eae25a73a33cf83ed426dddd9d7a079721f4a69053fb9a3e997387ba2eef2931198874de40b27a9ee519c6ec1a5d67","ssdeep":"","tlshash":"e5716158a05be4bccd9a8052701aa330f1b23fe29440c86e77b8dfa49698d61371e77d","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.625489Z","times_seen":3181,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/js/chunk-5a8a56f2.f23cb60b.js","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:10:01.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /js/chunk-5a8a56f2.f23cb60b.js HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:10:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"14407-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14407,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14407), with no line terminators","md5":"238e153930059329082bb0d098cd8dac","sha1":"0073509e7a5667a32deddda746867b183e554831","sha256":"faf7ce3150a95786caf2b3a3890c2aec4048ee77a8677c53631f6e998e92e61a","sha512":"64c52afac6792a2f699dbfd6b02829f39f1deac4af00b6d476df441d3691bff4734c4a97564f10b7ca93d74b2e73f5092c000f225d14fef5bc5b77ff952fa93e","ssdeep":"192:LgCjSRwrROR/LfNFaTfNFk/sOD4MSXi6HqgCI9pn5VssexyVj+4ce6s:5m3LfNcTfNgsA0X1k8XeU5+4ce3","tlshash":"3152e74e70bdedb8899a6152701622b971351bd0f4054cd8b7bccdf84489ea8a32f77d","first_seen":"2024-06-19T01:29:39Z","last_seen":"2026-05-17T03:11:11.818447Z","times_seen":804,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:55.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkktokshop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7436,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a4ebb119a50060a0e01fb44e2dff29e","sha1":"4b254539b59f61b738c072a6afbbe4793351ef98","sha256":"db0507d8469606e31e38437d288b7ea5fc8652f369b048b8a7e247fd97d2c744","sha512":"b4127ab876bd72147f351ecb5875e9adbff4c8087f7377e02369cd50f0b1e3156b4061146c1a201605fead01cde85c287ef09245cdbc48804727261509c1bac1","ssdeep":"192:5VandzoHaIDsGJTN1o1xzvxVRbQKgDCU70NUbcxhYuI3PnU7xG60gkAxpHPUL4CU:5VeF4DBm1hvPQmU7YTxhKU7s60RAszUN","tlshash":"9ee174a9ffe83c6d4b8486d1168725cfe4a0e03b9fd70ec604fdde448aa676a057c164","first_seen":"2024-12-30T22:39:58.238079Z","last_seen":"2026-05-31T13:48:58.241696Z","times_seen":740,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B08HD6SMMY/61Hmfj-ZbBL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.182.67.185","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:56.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B08HD6SMMY/61Hmfj-ZbBL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: M4Lsahsem5huX7JEOctMHK+tFUH2AssHCnF+QCkSC91N2VWTJ+H+SYyRRZfVTacnRoR/Fo5/Fkc=\r\nx-amz-request-id: ZE59S0XY8XM6RF88\r\nDate: Sun, 17 May 2026 03:09:58 GMT\r\nLast-Modified: Tue, 21 May 2024 20:59:39 GMT\r\nETag: \"a1734188bf728af1d2bc1d1208e0f770\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8474ec05ed643c5a71ab1b8e419f23ac2093beaf3a310b98d9b70713795d4c4d\r\nx-amz-meta-s3b-last-modified: 20230412T102755Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 98499\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":98499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"a1734188bf728af1d2bc1d1208e0f770","sha1":"029eb0c3d5fc7fb25561834526d3d84e90b79997","sha256":"8474ec05ed643c5a71ab1b8e419f23ac2093beaf3a310b98d9b70713795d4c4d","sha512":"1c39aff75617b9d9084fa5f236d558f2628b634588aa3c0d9e3c3ef441e44fc1f6a4949e7f93499d2239e239f075c03a310487538a4462113c9b569dd7637ced","ssdeep":"1536:YciMX0EafziFkAOm13oJcfUeCjvmaFekNsjfl/q7s+QkAVb4QQCwtp:8EaSkAz2yfUNvckNs7o7shd41CU","tlshash":"e4a30268871a5e8bd0a44178355adc417f20b2e9971f217b01f39ffa89b0693f221e5d","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-07-08T23:25:03.431373Z","times_seen":7284,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":130,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkktokshop.top/css/chunk-4ed2022c.1c551398.css","fqdn":"tkktokshop.top","domain":"tkktokshop.top","tld":"top"},"ip":{"addr":"202.61.84.89","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkktokshop.top/","date":"2026-05-17T03:09:59.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tkktokshop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 14:24:20 GMT","end":"Thu, 13 Aug 2026 14:24:19 GMT"},"fingerprint":{"sha1":"52:6B:0B:6E:6E:69:9E:35:05:84:A7:A1:35:33:2F:50:E6:DD:ED:9E","sha256":"17:65:5D:6B:58:17:E3:E4:E3:ED:10:9F:08:E5:9C:4E:9C:46:10:6A:65:F5:7A:92:AE:53:78:17:B2:D0:01:30"}}},"request":{"raw":"GET /css/chunk-4ed2022c.1c551398.css HTTP/1.1\r\nHost: tkktokshop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 03:09:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"2934-1706012686000\"\r\nlast-modified: Tue, 23 Jan 2024 12:24:46 GMT\r\nstrict-transport-security: max-age=31536000;\r\nserver: cdn\r\nx-cache-status: EXPIRED\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2934), with no line terminators","md5":"7fab75354a4c7f64c989d1addc4375b1","sha1":"bae4ad33eef30ac930e54bf5e0d6c98d545d8cf8","sha256":"b5b3f6af0e47a7901315d5e750525f924810caadc5364938261df41aa51a8699","sha512":"05245836867b6ed5019ac21a7465fd8808549ed70680c84cf16bb148004b6e17655beacbd35c09391ae98642d2cdcf35083fadff3127c86b8a2b6c71b3a57e7e","ssdeep":"","tlshash":"8d5100a1721d79bc4877e4227fd95ddf702cf25bc567820aaca1325f8ce324229116ce","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-05T08:23:29.932743Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"tkktokshop.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"tkktokshop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}