{"report_id":"c028ab8d-a56a-458b-b323-4e3a635e1bc8","version":0,"status":"done","tags":[],"date":"2026-09-03T14:05:57Z","url":{"schema":"http","addr":"ws-new.top/chat.php?force_phone=1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":0,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"http","addr":"ws-new.top/chat.php?force_phone=1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"title":"WhatsApp","dom":{"size":75364,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2620)","md5":"70d4ba9fde1726d8577668caac761b0c","sha1":"b53d9b7a9064db1ebf9a660e244f437056480028","sha256":"52a4113dd7144a86ee0fe00e79d8a4bc790432a59867ba395b03b16241818716","sha512":"5a522cea26ce3bfc45e23e26379297dbadf54813ce4e89865c2c7a1b28859422e019a5f4250e27bb7d51b6d330047ac324c916ec6ac028b5ce46ff46eb65058f","ssdeep":"768:bEIlcqSyhgcgFBwA3jDXHn5SZt+hU0CbIVO:wIuyhg5FBwGX5SZt+hhCMVO","tlshash":"2373e5c5a5d708a92033c1f9737a27152cbde293998bf9287eec83601fc4994927c9f5","dom_hash":"domhash144cd629b2c2e9b163f105f2f153fb4a","first_seen":"2026-09-03T14:05:59.448182Z","last_seen":"2026-09-03T14:05:59.448182Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ws-new.top/chat.php?force_phone=1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":0,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T14:05:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws-new.top","ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-09-01","domain_rank":0,"first_seen":"2026-09-03T14:05:56.205925Z","last_seen":"2026-09-03T14:05:56.205925Z","alert_count":105,"request_count":21,"received_data":619830,"sent_data":10628,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ws-new.top/js/jquery.min.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd299cbe4920ccddb55941097bcd433d","sha1":"f8ca56debc9ca7f5f158ec855ead041b8e0043a0","sha256":"99e643607d1ca19e19ef0c141e18af05d0f68d04b3005666c0e56fff67a6d3ba","sha512":"7308cfcd43641c1ffca2398d70bf8f4720b9a3155180b042c0b311d224861f0b23c102ce4ef754b0ab082744beccb29c224dbaed2c5d10ecb8abc74b15db389c","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9F:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrW","tlshash":"0893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97253,"data":"","first_seen":"2023-03-08T20:37:35Z","last_seen":"2026-09-03T14:05:59.45135Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/layer.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9311979ae53575a822f268ffe0bec185","sha1":"6b87dfea0e1befd7eb03933c1b274743bd483fe6","sha256":"5bb9243dd8b2776d1971282279fb32e27f34637d91607b4b30c61832d9767d00","sha512":"f8e4993e360e342727994c4688ccb456133884324e0d8436fa1948b69d82cca9b5ee46a071d4ecb6c2b446ce74f5b0c93b14cb6992e04f7c16c9273ec584ac69","ssdeep":"384:41xCih9yA3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41Ei53i+WtXItqF13k8","tlshash":"22a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-05-22T05:10:32Z","last_seen":"2026-09-03T14:05:59.452923Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/locales.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b082398cfa24d706b8415ce4e4660ff8","sha1":"49a14a478c75b42af442a975cfbd937b9c747e9a","sha256":"361917cd6037ae6335223b509fad0afffabe351d300e230ccae24ab9546655b1","sha512":"f77c36f299c9615433dc3687e0145ac1fde9a81971f7a60be5306e8889b916ee1cd853201937fe6feaa4cb51e9bbdb6ea08ec1ff87e07e4e578e021064bf08ad","ssdeep":"6144:MII9+TXBctKeV+C4hI4yDP7EyGxV62eLGMwl8jlr8/gsA2u7jhz+JZjkyi+MAMe6:MII2XBctKlC4h5yDP7EyGi2eLGMwl8jf","tlshash":"fb64f7fa0b6d315808805206b01d353a2a4e647fbf05b6fdba9cd7b92f8c85ce1b5d94","size":320501,"data":"","first_seen":"2026-09-03T14:05:59.462183Z","last_seen":"2026-09-03T14:05:59.462183Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"初始化消息轮询... nickname =访客730242","filename":"http://ws-new.top/chat.php?force_phone=1","line_number":1081,"column_number":9}]},"http":[{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:41.717Z","timestamp":1788444341717,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:42 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":216,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:44.715Z","timestamp":1788444344715,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:45 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":219,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/alimecss.css","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.590Z","timestamp":1788444328590,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /layer/alimecss.css HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:28:16 GMT\r\nETag: \"1b1-61991db08c000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 253\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":433,"size_decoded":558,"mime_type":"text/css","magic":"ASCII text","md5":"c42d0679a46a1683a6551ad4d3f93e58","sha1":"7b515b7d861bb54665d82d8e0570cc2ecb80b490","sha256":"1b9380659b801d1d5aaafa323414b8c4f5def64ffa2bd11773b929447679de2b","sha512":"ff940dad9927b71169875e73484be0333d811fe9e9555f937785ea66c2b78354aa6eb5a26d2b35a5ece34eecc09fb688320d83e7f6d708a7b87deffe786713be","ssdeep":"","tlshash":"dbe027a4a5a17d8e350e045f30e4a0440b69d480940d7f3d6eaeb0a5775c144f0f2381","first_seen":"2026-09-03T14:05:59.450319Z","last_seen":"2026-09-03T14:05:59.450319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":214,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/js/jquery.min.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.593Z","timestamp":1788444328593,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:29 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:28:15 GMT\r\nETag: \"17be5-61991daf97dc0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 33918\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97253,"size_decoded":34234,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029)","md5":"bd299cbe4920ccddb55941097bcd433d","sha1":"f8ca56debc9ca7f5f158ec855ead041b8e0043a0","sha256":"99e643607d1ca19e19ef0c141e18af05d0f68d04b3005666c0e56fff67a6d3ba","sha512":"7308cfcd43641c1ffca2398d70bf8f4720b9a3155180b042c0b311d224861f0b23c102ce4ef754b0ab082744beccb29c224dbaed2c5d10ecb8abc74b15db389c","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9F:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrW","tlshash":"0893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-08T20:37:35Z","last_seen":"2026-09-03T14:05:59.45135Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1083,"timings":{"blocked":415,"dns":0,"connect":223,"send":0,"wait":227,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/layer.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.595Z","timestamp":1788444328595,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /layer/layer.js HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:29 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:28:19 GMT\r\nETag: \"5664-61991db3686c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7617\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22116,"size_decoded":7931,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"9311979ae53575a822f268ffe0bec185","sha1":"6b87dfea0e1befd7eb03933c1b274743bd483fe6","sha256":"5bb9243dd8b2776d1971282279fb32e27f34637d91607b4b30c61832d9767d00","sha512":"f8e4993e360e342727994c4688ccb456133884324e0d8436fa1948b69d82cca9b5ee46a071d4ecb6c2b446ce74f5b0c93b14cb6992e04f7c16c9273ec584ac69","ssdeep":"384:41xCih9yA3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41Ei53i+WtXItqF13k8","tlshash":"22a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-05-22T05:10:32Z","last_seen":"2026-09-03T14:05:59.452923Z","times_seen":5,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":420,"dns":0,"connect":226,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:35.735Z","timestamp":1788444335735,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"nickname=%E8%AE%BF%E5%AE%A2730242\u0026lang=en-us\u0026status=1\u0026page=chat_phone"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:35 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:47.715Z","timestamp":1788444347715,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:48 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":0,"dns":0,"connect":220,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:50.715Z","timestamp":1788444350715,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:51 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":0,"dns":0,"connect":215,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-new.top/chat.php?force_phone=1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T14:05:26.924Z","timestamp":1788444326924,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /chat.php?force_phone=1 HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/chat.php?force_phone=1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T14:05:28.031Z","timestamp":1788444328031,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /chat.php?force_phone=1 HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nSet-Cookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; path=/\nname=%E8%AE%BF%E5%AE%A2730242; expires=Thu, 03-Sep-2026 14:15:28 GMT; Max-Age=600\nname=%E8%AE%BF%E5%AE%A2730242; expires=Thu, 03-Sep-2026 14:15:28 GMT; Max-Age=600\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 18947\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"s27j0c4795ii8u904rr3v109q7","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=s27j0c4795ii8u904rr3v109q7; path=/"},{"name":"name","value":"%E8%AE%BF%E5%AE%A2730242","quoted":false,"expires":"2026-09-03T14:15:28Z","raw_expires":"Thu, 03-Sep-2026 14:15:28 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"name=%E8%AE%BF%E5%AE%A2730242; expires=Thu, 03-Sep-2026 14:15:28 GMT; Max-Age=600"},{"name":"name","value":"%E8%AE%BF%E5%AE%A2730242","quoted":false,"expires":"2026-09-03T14:15:28Z","raw_expires":"Thu, 03-Sep-2026 14:15:28 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"name=%E8%AE%BF%E5%AE%A2730242; expires=Thu, 03-Sep-2026 14:15:28 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":69921,"size_decoded":19484,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2620)","md5":"19b35467d4c0e9c40e3774a58616e4c5","sha1":"111f93c2f8e65bbf31ca32da8de7cfd36f1003a7","sha256":"8bb01a974cc9e6da455b61f79aa79437c26281b7634903741131b459fb424ce8","sha512":"e8c077e7065203449ef6a6724eb82945f7e7afb549c45e41700d5ad8091d0592b9463d5f64f39e0b9160d9430ba5031115b8d55441c80c53121cbe4b95262450","ssdeep":"768:FT3lOqSyhgcgFBwA3jDXHn5SZt+hU0Cbj:l3wyhg5FBwGX5SZt+hhC/","tlshash":"ed63b4c9a5d708a92033d1f9337a27152cbde693598bf9283eec87600fc4994927c9f5","first_seen":"2026-09-03T14:05:59.456668Z","last_seen":"2026-09-03T14:05:59.456668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":5,"connect":235,"send":0,"wait":250,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/stylejym.css","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.582Z","timestamp":1788444328582,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stylejym.css HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 01 Sep 2026 10:07:22 GMT\r\nETag: \"4f63-65a6915b8701d-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5017\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20323,"size_decoded":5324,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (399)","md5":"b4843748d5ed4877f50a35af732d02f4","sha1":"9ea130077bac0a556aa18285933a7aebdffd3637","sha256":"2761dcb6e39717437b9242db01bf6a904a3dbaf0d9a91432aec33d79bbba844c","sha512":"de464d6ca256d98209606af91a6c5696a7a7186466d899c9b2362d1508ceea557cbfe59654688253300723268370db60cc9c3c720cd988f4a0c49ef6aa4d5cd9","ssdeep":"384:kx7AUBfY/j5ULG690rGrtoBF1/7rgr+/wgKC3V:kx7AUBwr5ye+tyXEiwgKC3V","tlshash":"7a928713e7a21905b127d1686ad89b563329a083d10affb9bed73104cfce5d54ab33c9","first_seen":"2026-09-03T14:05:59.458038Z","last_seen":"2026-09-03T14:05:59.458038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":215,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/img/whatsapp.png","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:29.812Z","timestamp":1788444329812,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/whatsapp.png HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:30 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 27 May 2026 23:39:00 GMT\r\nETag: \"3291-652d51db78e34\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12945\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12945,"size_decoded":13202,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c0e77e6fc2e18467a75db292afbee258","sha1":"c7bd8cb6b62e281e2a69db4091bd7be1558a66f3","sha256":"7fcee91b59a16c9e9e17edece129adf253c75bcf88f6aff1da82e06768cbdc68","sha512":"dc4a5d50b6cfa686cb1dc797f04fe26f5194d8ecba149332ec0fcd0bbc0bcd9ab6584b5daa195224322ac3fa29968443b45aa6b1721da0ed27c792ad841b3155","ssdeep":"192:ISHIIHUCD4wa0ZOfX6ELPVKiF+LXDiCwb9FSLzNKVWmC2mfB7qe/Iboj56apBIhS:P50wmfqEL3F+jAb9FWjhpgbooaTgS","tlshash":"3d42c0a9463f904e04035a625ecddb071cdeda71d3e8af1eda2e8b6daf25d002524a52","first_seen":"2026-09-03T14:05:59.459413Z","last_seen":"2026-09-03T14:05:59.459413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":350,"dns":0,"connect":222,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/assets/hk.svg","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:30.020Z","timestamp":1788444330020,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/hk.svg HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:30 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 24 Jun 2026 20:34:27 GMT\r\nETag: \"2b1-65505cd46f6ba-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 375\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":689,"size_decoded":685,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccc5b972c6f52405c2749ad2a927b0e3","sha1":"73d72450c8f562a1807dafee91985ffb11d6873a","sha256":"4c7cbced68ee586af8b3d73a8d8a8c404deaa271da7204eb2afe5c1b070972eb","sha512":"898b9ed0c8a9b20c0530531de7eb65bdc9e042435d779e0d6fb9b1a03db1174dc21a1cc10e7744f62f7747835242955586778af313077e33de8cc5bccc0f8f49","ssdeep":"","tlshash":"a501fe5c892d606c491aa358e6f8783cf20ff5ea7457046bf79d4f48d06b92bd50160c","first_seen":"2025-04-24T22:21:58.666713Z","last_seen":"2026-09-03T14:05:59.460531Z","times_seen":108,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":142,"dns":0,"connect":221,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/locales.js","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.591Z","timestamp":1788444328591,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /locales.js HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 01 Sep 2026 10:07:21 GMT\r\nETag: \"4e701-65a6915a5a386-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":321281,"size_decoded":71691,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1234)","md5":"b082398cfa24d706b8415ce4e4660ff8","sha1":"49a14a478c75b42af442a975cfbd937b9c747e9a","sha256":"361917cd6037ae6335223b509fad0afffabe351d300e230ccae24ab9546655b1","sha512":"f77c36f299c9615433dc3687e0145ac1fde9a81971f7a60be5306e8889b916ee1cd853201937fe6feaa4cb51e9bbdb6ea08ec1ff87e07e4e578e021064bf08ad","ssdeep":"6144:MII9+TXBctKeV+C4hI4yDP7EyGxV62eLGMwl8jlr8/gsA2u7jhz+JZjkyi+MAMe6:MII2XBctKlC4h5yDP7EyGi2eLGMwl8jf","tlshash":"fb64f7fa0b6d315808805206b01d353a2a4e647fbf05b6fdba9cd7b92f8c85ce1b5d94","first_seen":"2026-09-03T14:05:59.462183Z","last_seen":"2026-09-03T14:05:59.462183Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":230,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:32.715Z","timestamp":1788444332715,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:33 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":0,"dns":0,"connect":269,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:38.717Z","timestamp":1788444338717,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:39 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":0,"dns":0,"connect":216,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/statusjym.php","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:53.716Z","timestamp":1788444353716,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /statusjym.php HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 69\r\nOrigin: http://ws-new.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:54 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nContent-Length: 0\r\nContent-Type: text/html;charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T23:47:45.318433Z","times_seen":18355046,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":216,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/iconfont/iconfont.css","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.583Z","timestamp":1788444328583,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /iconfont/iconfont.css HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:27:55 GMT\r\nETag: \"732-61991d9c850c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1244\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1842,"size_decoded":1550,"mime_type":"text/css","magic":"ASCII text, with very long lines (1149)","md5":"18cf326fc83d4404e8a81c8b25b8a782","sha1":"be38e3d7dc0c33a9e945612b0881f9102c3721e9","sha256":"849eddd8aace1fc59f859c998e027c62ce857cc81a5d2c473e9e9868c26767f7","sha512":"77e601c5fd571e97a437d49edfd59d6d25b831a6a75e07a9369d536ce2c6093160c08908f46230f8c28ffffa78390e5ec0a7ed1f7da544089e07b35a649ebd10","ssdeep":"","tlshash":"9331d7bb09aa5c0c3bc71ca87386a8537f45268b0d9f48cbad2e193468f3a1490917cc","first_seen":"2023-06-29T16:51:31Z","last_seen":"2026-09-03T14:05:59.46377Z","times_seen":4,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":226,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/index255.css","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.588Z","timestamp":1788444328588,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /layer/index255.css HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 27 May 2026 20:25:47 GMT\r\nETag: \"997a-652d26ab9a774-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 8760\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39290,"size_decoded":9067,"mime_type":"text/css","magic":"ASCII text, with very long lines (39290), with no line terminators","md5":"2c30c9febbcc1fc2c16621ae8ca4727b","sha1":"f33b223b71c7172aeaad9a4fea808d48be22d92a","sha256":"f03fc0f04149fd33055ebfa714f1ec4620464682826297bf8d0667edbd7bb131","sha512":"a54210c7c766610851a729e893df525412e198ab6ffe62fbcf3c52cd78fc6706d4d1308514745b1a712337891ccdbadab19942d90acd610175c3246f7b1e89a6","ssdeep":"768:75+MrIUQxMic/zMYY1vGF6BzY9OdzVhN5HdBp1aaxSG74DCDA+z0Wvel9NRxI86:V+MrIUQxMic/zMYY1vGF6BzY9C3dBp13","tlshash":"9a03e9beab41212ca817ca12a3dc67dc4534e513cb130beff05b652187c7bf62a62759","first_seen":"2026-09-03T14:05:59.465279Z","last_seen":"2026-09-03T14:05:59.465279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":219,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/index269.css","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:28.589Z","timestamp":1788444328589,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /layer/index269.css HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:28 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:28:18 GMT\r\nETag: \"3266-61991db274480-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3667\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12902,"size_decoded":3974,"mime_type":"text/css","magic":"ASCII text, with very long lines (7108)","md5":"7d4020b35346f56cc39b52adbe8e9cfb","sha1":"3f642974fe52aee0e960b15a2405ddee04008709","sha256":"d300beece11c5cc7db8bc89595e2da6f297b58b67bc5533268cac17ba653b9fb","sha512":"f244179aa88166fcccd84e497f505f9eb729bb41a244ccc4b0fb86877bf71505b74fcc0092c23a2b803d44dc9618210f975d20ac736b9accf30b80ebea468d61","ssdeep":"192:JP/fbnkWO2+fDj0f72lpZkZMf7PhZh43SAtyDNsq7itbgXEWNc87s0AUR4:JTpOG72lhf7PhH4Ls2gXHLsoq","tlshash":"2f42e973a240363ce42bcc1913d47a9eb655943386436bfedc56a230c7cb6c66a6139e","first_seen":"2025-11-11T09:29:09.6488Z","last_seen":"2026-09-03T14:05:59.466638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":229,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ws-new.top/layer/theme/default/layer.css?v=3.1.1","fqdn":"ws-new.top","domain":"ws-new.top","tld":"top"},"ip":{"addr":"45.85.76.87","port":80,"asn":55933,"as":"Cloudie Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ws-new.top/chat.php?force_phone=1","date":"2026-09-03T14:05:29.708Z","timestamp":1788444329708,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: ws-new.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://ws-new.top/chat.php?force_phone=1\r\nCookie: PHPSESSID=s27j0c4795ii8u904rr3v109q7; name=%E8%AE%BF%E5%AE%A2730242\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 03 Sep 2026 14:05:30 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 29 May 2024 06:28:58 GMT\r\nETag: \"388d-61991dd899e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2839\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14477,"size_decoded":3146,"mime_type":"text/css","magic":"ASCII text, with very long lines (14477), with no line terminators","md5":"3c9551b7e25a2795597adcc06abe59a5","sha1":"27f240d7e1723698dfec062957818140e40b51ee","sha256":"31b9c934f5124841988edbdfeff72b95b14637f9679b74c7d7edd2c33c1bf982","sha512":"ff0523244af2daba9def2bd5d87c6c6dfa7260ab08a8d4b2c34cbe5c69834a5010b74e02f0a04d4350ef428e433373fda77381055545e175f73f0fd7fe8326f0","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPDFOtLzXyPHL/LztJDzyv2OMdKbS1jvV2/SWz:1WmLrFOtSrzzt42OMdKbS1jjWR2b+RcU","tlshash":"965231e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-05-22T05:10:32Z","last_seen":"2026-09-03T14:05:59.469426Z","times_seen":4,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":229,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"ws-new.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"ws-new.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}