{"report_id":"bfb5abef-8bc0-46a4-b243-7bd085a7b8db","version":0,"status":"done","tags":[],"date":"2026-06-27T00:19:22Z","url":{"schema":"http","addr":"novae-whatapt.hl.cn","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"104.21.91.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"title":"WhatsApp 网页版 - 竹简文字延续数字聊天文化 -官网","dom":{"size":30172,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e6ec31d23b7d287c4d5a2c4050d307bc","sha1":"4e3db4254922dcf3b259dfc7701d393fc092cc54","sha256":"11ddb134bc0d859e4fc5b84eaea62c5d155f9130acdce381f96b45f43ac9490b","sha512":"57f00d71b38e5b20aefe3df346403675e92274d4a98915d4b741cbc2bca6d83ec1ba7fbd5fb2b95235f3d21cffe7923c6a67410e6d9ddaa5c690eafef1c7d248","ssdeep":"768:NckhCJS/kyeXe0XVKfZ+KkW558ki2r/te82WQlwBuhi:NdhCJS/kyeXe0XVKfZ+KkW558ki2r/tJ","tlshash":"cfd2c73a9bf314562817d0b4a7a7234abad8c113cd0ecd683bdd42689fca99574d7b0c","dom_hash":"domhashb86b76e42eb2c816ee1357def55e7962","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"novae-whatapt.hl.cn","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"104.21.91.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T00:19:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"novae-whatapt.hl.cn","ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-24","domain_rank":0,"first_seen":"2026-06-27T00:16:49.734802Z","last_seen":"2026-06-27T00:16:49.734802Z","alert_count":16,"request_count":8,"received_data":2441755,"sent_data":4259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/b36e10ba-3a2b-4060-a3f6-020db0d0f855.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.084Z","timestamp":1782519530084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/b36e10ba-3a2b-4060-a3f6-020db0d0f855.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:28:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33ba56-85a64\"\r\nexpires: Mon, 27 Jul 2026 00:18:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jxgoqdylgTr%2BS4CcB0j18h8kKm3QMf1hFy3%2B%2FFcp4aFPDdLRiK%2B1KmuoYqMvlZWLyAvT35MHds4iKAf2lUtbwR4q0kH3ChnSd1D5zRxRGnt9d0jYyT%2BE3wpcqYuzRkgyyt7RATI\"}]}\r\ncf-ray: a12046d70d8ab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":547428,"size_decoded":547700,"mime_type":"image/png","magic":"PNG image data, 665 x 552, 8-bit/color RGB, non-interlaced","md5":"81c3dd9ae7e00a3ad410522db7a85bc7","sha1":"7f39deb55e7e046e701090b64e9c20fc15939d8c","sha256":"72a7ca7ef31577e5484ebd157c9560834aaec4dae7fa27e8140f153134dc1b2d","sha512":"c748c13b5effa7918aab4ac9eb2efdf69083a6b63303b4961d594fc55ed7e2c6ddc53d03b2ba877cb1083affa160f37ec8d1bb36d729ef21fe415429353f29a1","ssdeep":"12288:yTvLN6eT1UgXq4T/8QePm7DTp0f+QrM00tIV:yTvLN/XDT/8QePsCvMNuV","tlshash":"e5c4236370a81490ffdf0502c80a5bb4eacbb09b47dc53ac55d5ea8c29bd9493e4fac5","first_seen":"2026-06-27T00:19:24.646517Z","last_seen":"2026-06-27T01:03:26.382784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/027a25e3-43df-40af-85c8-bf48f744858e.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.140Z","timestamp":1782519530140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/027a25e3-43df-40af-85c8-bf48f744858e.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:29:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33ba72-74219\"\r\nexpires: Sun, 26 Jul 2026 01:38:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 81647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zB2oEp7GQsbs%2F5tqVX3vBUKFkGVbjoqWMg3INbxCM2wxgn%2FOBsmLLTlMU1TJS8T%2FGinzMeACAYiPdomnw3Kyn%2BI9lXS63VFGjKB110RfbDb0Ss6SERfU2OvMR1AX9PFsaduc98dA\"}]}\r\ncf-ray: a12046d76d8cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475673,"size_decoded":474112,"mime_type":"image/png","magic":"PNG image data, 794 x 565, 8-bit/color RGB, non-interlaced","md5":"1d2621877d498e2aa8bbcb748d54a312","sha1":"6d1478ae0ad1ba840da7046afe5dd1b43f79b6ef","sha256":"f4d37a9c49082909117cb243144af02b905245d6740f3d51dd2a289be978d28d","sha512":"38e38a3464542ae33a0042f210a3b1708c9106d1359c1eb8e4027cdfd009239f31fbaf3d7459013e3658ad8d22443e378131cc214ce0887a8a056442e641455c","ssdeep":"12288:sdu4CoQ+wl2++YSMNSf6jc5x1vcuP/EXUo:N+wv+YSGBjc5soMko","tlshash":"45a423f39014cce19da70d9103a8bc8da5ceb6d3fd3652a1274aa199c5cf8c43a176f6","first_seen":"2026-06-21T14:25:50.829492Z","last_seen":"2026-06-27T01:03:26.384872Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/4dbce8a4-274f-42c8-8879-c2f16c4d9a0b.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.142Z","timestamp":1782519530142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/4dbce8a4-274f-42c8-8879-c2f16c4d9a0b.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:28:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33ba44-742df\"\r\nexpires: Sun, 26 Jul 2026 01:38:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 81647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HI8ZXZI11wYmn53n8F9gd5QvvdcLnpZnyXzMirwbU5qOC9FpXMuGhA7vh1IEBU7x8fmTZpx94%2BmwWV7EeZBtJ8jQ83MDxP8ilG5XHtHhsyVPo0hh3vfb3DNX7DKnz05fnjdDIRh\"}]}\r\ncf-ray: a12046d76d8fb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475871,"size_decoded":476613,"mime_type":"image/png","magic":"PNG image data, 511 x 502, 8-bit/color RGB, non-interlaced","md5":"3f813b7c061bbf1ec4ae20e97c0c6d6a","sha1":"d2e7007c1a5d54831c2d8843316315dd65d6cf18","sha256":"92f9bae3aa96798a8e3e2443441065f37022be187fa10452adf8e69fb1c9fee1","sha512":"91717210913302a1371fc97cf18e348170d2952ee6e1f125f8c500ebedf4a5cd2b65e012945eab6f1984d7f2a8d4c2c9545db0c360db9274840877b950319261","ssdeep":"12288:6KVQVBUK2Uh5/LkXJrS95LtPTefxdKIq63WZJgtqqB0:6KV8tdPIN65VefxdKz63uAq40","tlshash":"eea423ad26f48d0a8c4623075f0b757c704d2c63812ff9e27baaef91659f810691e5bc","first_seen":"2026-06-21T14:25:50.824434Z","last_seen":"2026-06-27T01:03:26.385476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/a6834e3c-9b8f-4b446834ef.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.144Z","timestamp":1782519530144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/a6834e3c-9b8f-4b446834ef.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:25:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33b984-19fbb\"\r\nexpires: Sun, 26 Jul 2026 01:38:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 81647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O9n6jHXPkDhDkROV3IfipUnk3oEEVCmze0T%2F3Rwo4A6ML79%2FS9i6PulNl1SVCYXitLkTbtjMuwOvZ1nIKc9HW0mdJOTClUc2qeUc7zeIdHtaNDHCmfdxdknzhH%2BVYkgG%2BXRFjDb\"}]}\r\ncf-ray: a12046d76d90b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106427,"size_decoded":104894,"mime_type":"image/png","magic":"PNG image data, 454 x 498, 8-bit/color RGB, non-interlaced","md5":"dbc069f3923388451442d886b879c872","sha1":"64bdd609de2ad8d95eecb7660d36b9c07112fa06","sha256":"c3faddd049b06dc6f1e9f1b26a4b0fdb88cfcc8134ec60fe78350f5432cddaaf","sha512":"2762e33ddcee7f1588bc2d4a431099452bb67579fdd659e34f8746ee050fee0cebfcd6703c44202c0808e704c290be86c16db5afd69adf481fcf426ca524a5a1","ssdeep":"3072:Uo5GXDvI834UzvYXknUypiVUNUo0wbUJS3+tz:Uo5Cz7kkTiiUo0wbUI3+V","tlshash":"69a3128a9bdd98970a3bb5a76e4d1ca76fc20c07eb479cf50ae502c8d149a106bcf15c","first_seen":"2026-06-27T00:19:24.649748Z","last_seen":"2026-06-27T01:03:26.377706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/83467147-437e-4d74-9af9-9d9f07a5efb9.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.145Z","timestamp":1782519530145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/83467147-437e-4d74-9af9-9d9f07a5efb9.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:27:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33b9f6-886e9\"\r\nexpires: Sun, 26 Jul 2026 01:38:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 81644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1QgoSq5I2eHlVDKlQTewd4nNZCx4R4tKETg1WhMS2DaDSgeq%2Bh36djZKOCZOsS4dOtp4QFDllwP9eMa46RZc8bmTOHj3mNak78%2Bo5ePRlh3utXP88CgXZz%2F4LXctAmsTC7DOOfj\"}]}\r\ncf-ray: a12046d76d91b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558825,"size_decoded":559732,"mime_type":"image/png","magic":"PNG image data, 689 x 529, 8-bit/color RGB, non-interlaced","md5":"9c4a6c2ab12ce221d53b36a90c066ec0","sha1":"daf9ed46a0862f70f67e979d71e57f1dffe49029","sha256":"09aeedf067ac7e4f56b5ba7f0f2173c6e333ba9c76348d3ad72061dd9972fb04","sha512":"b46939f2cda02ad109a8dea1012642a902fe46be5ea03bb586cb0c5da28ec150b29ab76d95eb5a42bf6de9de253e3a43fe10970c591edf0866e9044373925693","ssdeep":"12288:cWldbdqNm8HVoeemKZc3or7gaMG+cx9NM8EWU8ISa9s7+4k:N5dWf1oBaza7+m889U8IdG7+4k","tlshash":"62c423fa3099abe3f50b05c0a9e1a75d1f7dfe85c8d407c78275062a91d2a4d0e4f2b9","first_seen":"2026-06-21T14:25:50.822072Z","last_seen":"2026-06-27T01:03:26.37966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/JPG/45sss.png","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.147Z","timestamp":1782519530147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /JPG/45sss.png HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Jun 2026 09:25:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a33b9a4-39c25\"\r\nexpires: Sun, 26 Jul 2026 01:38:03 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 81646\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FhahwTLtgDQ2QlMJdO7QtEfXdZbry2Xi%2FIgk1rmcpx3Qk13mCmY86NaDBLpNthu4CcEWUQ0Zmecwws9q95UXAi2MF6VkumjvqCN61%2F53cbqZiod8qdwJJiucz8Y9GRUvPQ6RmTH\"}]}\r\ncf-ray: a12046d76d92b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236581,"size_decoded":237162,"mime_type":"image/png","magic":"PNG image data, 591 x 617, 8-bit/color RGB, non-interlaced","md5":"01f504e772e4f3ed13abd37160223c00","sha1":"39e57f4f4109148107ae5b0c016aa5aa6aec5307","sha256":"448bbc52252b4e86e25c387c385af2ce255eec8c29974b85549473f7b6c69e58","sha512":"447d0a654df8fb6f540e7a3ef62dd1003c8660fd584c475bca20cc1a030c7dd90faa33f858336cb4eb6e5a7511ce09d50a157a90d880bd98602d903af21573b2","ssdeep":"6144:sb2IFyn8lt+An0DfzxlT8pKA3pAEDDoBukQnW7yy:sc8lttn0D7xtA3ptoBukxWy","tlshash":"9c3423c262128a399ecb6ee43c426e37fc668824c3779ac5fde3259594b511e7f84307","first_seen":"2026-06-21T14:25:50.827801Z","last_seen":"2026-06-27T01:03:26.380632Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/favicon.ico","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://novae-whatapt.hl.cn/","date":"2026-06-27T00:18:50.300Z","timestamp":1782519530300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://novae-whatapt.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:50 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a33b860-10be\"\r\nlast-modified: Thu, 18 Jun 2026 09:20:32 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8qZ9iHTpWJKkXGU9RVIDFUqNgnaUHNAvCjqJqcZDTSemV22V1NWUPM3Xuo9Q6kn%2FSzMBanTpmQPPCzzekQBRP9EI7eNYIi9C9ivqzU1DG6ArHJbCQZ%2FTwKhoZMWby151OV32ze5\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a12046d86d9db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2572,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"8a7e51ecc755de991dae7d39b83b20f0","sha1":"e87ca358c45201919adf4d7e460ed67ca4ae7fac","sha256":"6d782c896932b96eee734d5f8ce40680f990ea18ac85d4ea1f1781c1f5ef9410","sha512":"db7e51f6f301437f432cd250a94841ac19ebd538922f5a122fd55dd53b52c60ebcb149448ed8ffabfa1d4846e3f07031f4b1bed453eb2e870d373cc82f1b678f","ssdeep":"48:TiiiiiK2piiiiiiiiiiiiiiiiiiiiiihaPiiiiiiiiiiiiiiiiiiiiii6fiiiiiW:x26f7d+YRPjq6V0CDFxa6Lg","tlshash":"2991cb46a1512164e1cc6a36cba7e85d81724d537c999a02b13e30df4f377c95cda38a","first_seen":"2026-06-21T01:22:31.785702Z","last_seen":"2026-06-27T01:03:26.384131Z","times_seen":10,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"novae-whatapt.hl.cn/","fqdn":"novae-whatapt.hl.cn","domain":"novae-whatapt.hl.cn","tld":"hl.cn"},"ip":{"addr":"172.67.222.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T00:18:49.328Z","timestamp":1782519529328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"novae-whatapt.hl.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 15:27:12 GMT","end":"Tue, 22 Sep 2026 16:24:44 GMT"},"fingerprint":{"sha1":"82:3F:DD:5D:39:C7:0A:D0:9F:92:C2:21:AD:D6:C2:77:5E:AF:F7:21","sha256":"1A:B1:1C:12:CF:40:A4:54:CF:02:C0:D5:0F:64:E8:94:96:F5:7A:98:40:EF:B7:32:DD:01:F3:FA:3A:F0:DA:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: novae-whatapt.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 00:18:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEYVj0pnvH7glCGPnMVc57pLe0gI9aPtFHIUXK2OxvaW45LNnbtQb%2B8ChdEVFznXwMdbsTp8yLb4XKJM%2FShFoICz8%2Fn5NJMLyUAfTCEpRgU5rrac7ffgPW43Z1LZYb3BxJE9iLDp\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12046d27d68b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30882,"size_decoded":8407,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"31ae218b7ccaacac75796c21cefdb4df","sha1":"2f82b90fa4380365aa4e3fd8de78fd83b980666d","sha256":"8b604a0d5ea388e59e19cdb546b5a7ac0354f9d539be0c21229b385db845f6a8","sha512":"8c5e1d906e7c69530836b6a75fa44165421d575a7551536494711fc4c7537ad9fb306c31fbe208299e3a3bbd2e8162e79f4b9051f25be5f0beaad94e66a2e99c","ssdeep":"768:vmmCCJS/kyeXe0XVKk5DHSDHJe5NX/Sl60Lnx+ilRp9:vVCCJS/kyeXe0XVKk5DHSDHJe5NX/SlV","tlshash":"e0d20a36e78028561433d3b4ebb3574afee88123c906426c7bee52661ffa9545097f4c","first_seen":"2026-06-27T00:19:24.653153Z","last_seen":"2026-06-27T01:03:26.381501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"novae-whatapt.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}