{"report_id":"c4667342-1d8f-48c6-90f0-5db04aabf855","version":6,"status":"done","tags":[],"date":"2026-01-01T11:03:13Z","url":{"schema":"http","addr":"l2e.click/d/kmhNveb","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.202","port":0,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"l2e.click/d/kmhNveb","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"title":"Files shared via Linkex","dom":{"size":32940,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (17086)","md5":"557672edaed59c37904da3210f960b9e","sha1":"971cfd9e22e5a214bc0491b24f28c4dc650b3047","sha256":"cb9b76ecb143af0636dc714be97a7f02f12f6663184435383f2364359ab6417d","sha512":"18fb0e40c25028fa3ef4688040c9064de2feb51bf69e9b02683976b82c7d48c4258918b9d70b1e91401c6e9f2a09ad5d7ecf83153904882bfd29d03ab8d76fdc","ssdeep":"768:/l0rGV4xksc64Jysq7vxgrdLn++kps4EEcZC9B:/lebx/c64Jysq7vqRDNoB","tlshash":"07e22be0b54c2174ac1fa750eec8e62ce015b852bf624521914d1c8afad2ffd3ce9e95","dom_hash":"domhashdd58bcf1ca8d936ceb13813c15aad049","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"l2e.click/d/kmhNveb","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.202","port":0,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-05T11:03:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"l2e.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"avatar.filespeed.uno","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"l2e.click","ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":815007,"sent_data":1854,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"s2e.ink","ip":{"addr":"47.246.48.200","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":5104,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"avatar.filespeed.uno","ip":{"addr":"47.246.48.202","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-28","domain_rank":0,"first_seen":"2026-01-01T11:03:13.801992Z","last_seen":"2026-01-01T11:03:13.801992Z","alert_count":1,"request_count":1,"received_data":3280,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"l2e.click/assets/index-BhRqlJ_r.js","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9e12c4fbc8d224169c9b1793242492b","sha1":"63d72db75d68723e2c463905bf7f178c2c910c15","sha256":"67fa46b9661020a8978983f21f446744fc76f1112a34e61cc98996d41b08f849","sha512":"f8c5d9130d90de136c2742b4744702d9e0a96612dcddf00cf7b7686c38eb9426a7fbd219e91faf9b9b7e9f4b0f1818188b852d24d32f92ee2d55bda483a73f8e","ssdeep":"12288:bqF17n2Sd4BM/hiEOmxp8UH5HOtPqdKOfXGOeVkGdIGCzB11vPZ2Y0jc6elg:bqF1P4BMLH5u4dKHOMdzAPx2Ycc6elg","tlshash":"5af4d1e87199b1758be342f1107f400ab23d2d12784d8450f128edad7bb9989a17bfed","size":753014,"data":"","first_seen":"2026-01-01T11:03:23.708079Z","last_seen":"2026-01-01T11:03:23.708079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"l2e.click/d/kmhNveb","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T11:02:50.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.l2e.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 02:59:55 GMT","end":"Wed, 04 Feb 2026 02:59:54 GMT"},"fingerprint":{"sha1":"5B:3D:C1:B5:D2:F2:5D:9A:71:0A:84:E1:27:CB:F4:2E:64:87:72:C5","sha256":"96:79:73:54:26:A4:00:11:FB:9C:FE:6C:26:F7:CF:70:19:24:B1:14:7D:00:08:E3:BC:41:17:D8:72:B7:A7:09"}}},"request":{"raw":"GET /d/kmhNveb HTTP/1.1\r\nHost: l2e.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: text/html\r\nContent-Length: 991\r\nConnection: keep-alive\r\nDate: Wed, 31 Dec 2025 11:19:01 GMT\r\nLast-Modified: Thu, 18 Dec 2025 10:14:26 GMT\r\nETag: \"6943d402-3df\"\r\nAccept-Ranges: bytes\r\nVia: ens-cache17.l2de4[0,0,200-0,H], ens-cache17.l2de4[1,0], ens-cache5.nl3[323,323,200-0,M], ens-cache12.nl3[327,0]\r\nAge: 85431\r\nAli-Swift-Global-Savetime: 1767179941\r\nX-Cache: MISS TCP_MISS dirn:-2:-2\r\nX-Swift-SaveTime: Thu, 01 Jan 2026 11:02:52 GMT\r\nX-Swift-CacheTime: 2506569\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff630a017672653717913345e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":991,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"cb8bc49ee705f46416861e6fb781c153","sha1":"fffcdf27ec2cf300b1dcc4bf4385ef4c471823c0","sha256":"e9ccf141efa947c9c56ae40b9e133f9cc6539e16f3737907da8afad5770e8982","sha512":"7bf96b4aaf2555afb4c8ca18b1f536c16bcf6b299c9c434ead2a9a6a3990cbc1e060ab1edc62c150d1b94433be1d6db67f30fff51de97fb3f9476ce509c14e3a","ssdeep":"","tlshash":"ed11389799e0c8096320c52038d7f408d992c59bc7546c85b59974ae0ed2bd6c7ff2b4","first_seen":"2026-01-01T11:03:23.705025Z","last_seen":"2026-01-01T11:03:23.705025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2511,"timings":{"blocked":1078,"dns":1014,"connect":26,"send":0,"wait":355,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"l2e.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l2e.click/assets/index-BhRqlJ_r.js","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l2e.click/d/kmhNveb","date":"2026-01-01T11:02:52.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.l2e.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 02:59:55 GMT","end":"Wed, 04 Feb 2026 02:59:54 GMT"},"fingerprint":{"sha1":"5B:3D:C1:B5:D2:F2:5D:9A:71:0A:84:E1:27:CB:F4:2E:64:87:72:C5","sha256":"96:79:73:54:26:A4:00:11:FB:9C:FE:6C:26:F7:CF:70:19:24:B1:14:7D:00:08:E3:BC:41:17:D8:72:B7:A7:09"}}},"request":{"raw":"GET /assets/index-BhRqlJ_r.js HTTP/1.1\r\nHost: l2e.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l2e.click/d/kmhNveb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nDate: Thu, 25 Dec 2025 09:27:27 GMT\r\nLast-Modified: Thu, 18 Dec 2025 10:14:26 GMT\r\nETag: W/\"6943d402-b7d76\"\r\nVia: ens-cache35.l2de4[0,0,200-0,H], ens-cache23.l2de4[2,0], ens-cache4.nl3[0,28,200-0,H], ens-cache12.nl3[31,0]\r\nAge: 610525\r\nAli-Swift-Global-Savetime: 1766654847\r\nX-Cache: HIT TCP_HIT dirn:0:859088766\r\nX-Swift-SaveTime: Mon, 29 Dec 2025 00:08:01 GMT\r\nX-Swift-CacheTime: 2279966\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff630a017672653722763957e\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":753014,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37655)","md5":"e9e12c4fbc8d224169c9b1793242492b","sha1":"63d72db75d68723e2c463905bf7f178c2c910c15","sha256":"67fa46b9661020a8978983f21f446744fc76f1112a34e61cc98996d41b08f849","sha512":"f8c5d9130d90de136c2742b4744702d9e0a96612dcddf00cf7b7686c38eb9426a7fbd219e91faf9b9b7e9f4b0f1818188b852d24d32f92ee2d55bda483a73f8e","ssdeep":"12288:bqF17n2Sd4BM/hiEOmxp8UH5HOtPqdKOfXGOeVkGdIGCzB11vPZ2Y0jc6elg:bqF1P4BMLH5u4dKHOMdzAPx2Ycc6elg","tlshash":"5af4d1e87199b1758be342f1107f400ab23d2d12784d8450f128edad7bb9989a17bfed","first_seen":"2026-01-01T11:03:23.708079Z","last_seen":"2026-01-01T11:03:23.708079Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"l2e.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l2e.click/assets/index-wdGXenNP.css","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://l2e.click/d/kmhNveb","date":"2026-01-01T11:02:52.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.l2e.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 02:59:55 GMT","end":"Wed, 04 Feb 2026 02:59:54 GMT"},"fingerprint":{"sha1":"5B:3D:C1:B5:D2:F2:5D:9A:71:0A:84:E1:27:CB:F4:2E:64:87:72:C5","sha256":"96:79:73:54:26:A4:00:11:FB:9C:FE:6C:26:F7:CF:70:19:24:B1:14:7D:00:08:E3:BC:41:17:D8:72:B7:A7:09"}}},"request":{"raw":"GET /assets/index-wdGXenNP.css HTTP/1.1\r\nHost: l2e.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l2e.click/d/kmhNveb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nDate: Thu, 25 Dec 2025 09:03:52 GMT\r\nLast-Modified: Thu, 18 Dec 2025 10:14:26 GMT\r\nETag: W/\"6943d402-e1a5\"\r\nVia: ens-cache17.l2de4[0,0,200-0,H], ens-cache2.l2de4[1,0], ens-cache7.nl3[0,0,200-0,H], ens-cache5.nl3[14,0]\r\nAge: 611940\r\nAli-Swift-Global-Savetime: 1766653432\r\nX-Cache: HIT TCP_HIT dirn:12:663725364\r\nX-Swift-SaveTime: Wed, 31 Dec 2025 02:44:53 GMT\r\nX-Swift-CacheTime: 2096339\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff6309917672653723306956e\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":57765,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57764)","md5":"5dd9dec560e1826624dcb962b5304d13","sha1":"5c6f25483dc093710d6fae084a975b2a7c88b1a0","sha256":"81fed5fe2eb95d0c4a462b1c0d1a089fa5ad0c2b9661a168ef16029e7a4da96a","sha512":"d2fd22b149c377ed72ac0d5bdd7a6a2b8ae7c3f8aa4e328c78cbace169e1ab3861070e3bf498855d4c4125f05803216b4358c93ba40539ec4060ad27f007636e","ssdeep":"768:CoSXoilnKpnu9y/KV+sPc1QXLs9n8U3+eDXDC1Hj5ZQvSH1KziMKp7ist:CoSXdVPIXuzZQvSH1KtKp7Nt","tlshash":"b6439360f136e97fbd339c7d639cf85ca509b481ae3147e9fb02a22256c7af21566304","first_seen":"2026-01-01T11:03:23.71102Z","last_seen":"2026-01-01T11:03:23.71102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":63,"dns":1,"connect":26,"send":0,"wait":49,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"l2e.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l2e.click/api/file/share_out_list/web","fqdn":"l2e.click","domain":"l2e.click","tld":"click"},"ip":{"addr":"47.246.48.207","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://l2e.click/d/kmhNveb","date":"2026-01-01T11:02:52.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.l2e.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 02:59:55 GMT","end":"Wed, 04 Feb 2026 02:59:54 GMT"},"fingerprint":{"sha1":"5B:3D:C1:B5:D2:F2:5D:9A:71:0A:84:E1:27:CB:F4:2E:64:87:72:C5","sha256":"96:79:73:54:26:A4:00:11:FB:9C:FE:6C:26:F7:CF:70:19:24:B1:14:7D:00:08:E3:BC:41:17:D8:72:B7:A7:09"}}},"request":{"raw":"POST /api/file/share_out_list/web HTTP/1.1\r\nHost: l2e.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l2e.click/d/kmhNveb\r\nContent-Type: application/json\r\nContent-Length: 208\r\nOrigin: https://l2e.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":208,"data":"{\"anm\":\"linkex\",\"request_data\":\"{\\\"shareToken\\\":\\\"kmhNveb\\\",\\\"shareType\\\":\\\"comList\\\",\\\"pid\\\":0,\\\"offsetNo\\\":0,\\\"pageSize\\\":20,\\\"sortAsc\\\":1,\\\"sortField\\\":\\\"name\\\"}\",\"sign\":\"4d5903f72f00170b24cb295bd5c011e2\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 908\r\nConnection: keep-alive\r\nDate: Thu, 01 Jan 2026 11:02:53 GMT\r\nStime: 1767265373\r\nVia: ens-cache33.l2de4[1092,1092,200-0,M], ens-cache33.l2de4[1094,0], ens-cache12.nl3[1106,1106,200-0,M], ens-cache12.nl3[1108,0]\r\nAli-Swift-Global-Savetime: 1767265373\r\nX-Cache: MISS TCP_MISS dirn:-2:-2\r\nX-Swift-SaveTime: Thu, 01 Jan 2026 11:02:53 GMT\r\nX-Swift-CacheTime: 0\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff630a017672653726654580e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":908,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b19ceea501ac2599472c1c9242542a18","sha1":"4dadfe5bd195682439919f1039c6ecb7a5bc7dfc","sha256":"7fb16ff539ae8bdd7ea9484e915327c9a99beb45cc731537115e49d06c5925bd","sha512":"dbd7d27940bf05333d800add349d653f8de50a38ff064dc50449128d5d56929efce2d7c1288e5ac9dd71a1dd56dcb9e3ecbcb8c616f329156bcfbb5f05585c4f","ssdeep":"","tlshash":"c411d958743cdefbc8c02c4e5ab75e22721849ab6b93051896d8ca0201fc8b1739f515","first_seen":"2026-01-01T11:03:23.713859Z","last_seen":"2026-01-01T11:03:23.713859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"l2e.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2e.ink/static/app_log.svg","fqdn":"s2e.ink","domain":"s2e.ink","tld":"ink"},"ip":{"addr":"47.246.48.200","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l2e.click/d/kmhNveb","date":"2026-01-01T11:02:52.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s2e.ink","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Sun, 08 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"91:B7:55:58:E1:7D:EB:C1:7A:7C:E6:11:5F:38:9A:71:F9:28:5D:FA","sha256":"7E:B5:00:5E:D0:1D:41:4B:30:2F:DE:B0:17:9A:4E:12:3A:88:76:DA:F1:CD:B2:B6:98:69:B0:3E:69:7C:9C:18"}}},"request":{"raw":"GET /static/app_log.svg HTTP/1.1\r\nHost: s2e.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l2e.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Thu, 01 Jan 2026 11:02:55 GMT\r\nx-oss-request-id: 6956545F72F1BC39305331E4\r\nx-oss-cdn-auth: success\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: null\r\ncontent-md5: qQS5ZokyvrFZLiK+OPK64A==\r\nx-oss-server-time: 26\r\nvia: ens-cache24.l2de4[569,569,304-0,H], ens-cache35.l2de4[571,0], ens-cache7.nl3[2025,2025,200-0,H], ens-cache10.nl3[2029,0]\r\netag: W/\"A904B9668932BEB1592E22BE38F2BAE0\"\r\nlast-modified: Tue, 16 Dec 2025 02:56:27 GMT\r\nx-oss-hash-crc64ecma: 13565465229262924406\r\nage: 0\r\nali-swift-global-savetime: 1767265375\r\nx-cache: HIT TCP_REFRESH_HIT dirn:11:368440394\r\nx-swift-savetime: Thu, 01 Jan 2026 11:02:55 GMT\r\nx-swift-cachetime: 60\r\ntiming-allow-origin: *\r\neagleid: 2ff6309e17672653737532122e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a904b9668932beb1592e22be38f2bae0","sha1":"07f13da2a2fbcea230a906ab092bad527e575bc5","sha256":"6b040c23120745aaea6467053a99d5b6238214a51cacdb78592393995b03fd99","sha512":"7c90bddc2860e53f37b7048f7a87fe53f7a799ed096cd4935edd70483a8e6df66f947ee0e7396cc87ad26e3fcde27d4a0115e7f32595bc16e3012026002da83a","ssdeep":"96:JL+lldrbEa8UyqdjHUnug8rteOUAbRtOJZmyRJj:JSlQabyqVHUug+teMbY","tlshash":"29919550732c637efa05e2dc922bd8b0ba4a80e4f2c60079c3157f2515e709eec592da","first_seen":"2026-01-01T11:03:23.716477Z","last_seen":"2026-01-01T11:03:23.716477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3012,"timings":{"blocked":0,"dns":670,"connect":26,"send":0,"wait":2059,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatar.filespeed.uno/avatar/609445610?x-image-process=style/fixed_150","fqdn":"avatar.filespeed.uno","domain":"filespeed.uno","tld":"uno"},"ip":{"addr":"47.246.48.202","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l2e.click/d/kmhNveb","date":"2026-01-01T11:02:53.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.filespeed.uno","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 02:50:12 GMT","end":"Tue, 27 Jan 2026 02:50:11 GMT"},"fingerprint":{"sha1":"DE:27:20:31:1C:19:D4:6D:E6:5E:BF:5C:04:CC:B9:1C:EC:03:03:EE","sha256":"A9:29:AA:A6:24:D4:2E:DE:76:94:1C:B8:D1:D6:55:68:8D:B9:45:32:3C:91:50:1F:26:EE:29:F5:D0:FB:19:DB"}}},"request":{"raw":"GET /avatar/609445610?x-image-process=style/fixed_150 HTTP/1.1\r\nHost: avatar.filespeed.uno\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l2e.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: image/jpg\r\nContent-Length: 2454\r\nConnection: keep-alive\r\nDate: Wed, 31 Dec 2025 12:04:11 GMT\r\nx-oss-request-id: 6955113BE748163639B12421\r\nx-oss-cdn-auth: success\r\nAccept-Ranges: bytes\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nContent-MD5: +mSpp5xqC6O4V7xKzKVRBQ==\r\nx-oss-server-time: 29\r\nVia: ens-cache40.l2de4[0,0,304-0,H], ens-cache14.l2de4[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache10.nl3[3,0]\r\nETag: \"FA64A9A79C6A0BA3B857BC4ACCA55105\"\r\nLast-Modified: Thu, 27 Nov 2025 02:48:00 GMT\r\nx-oss-hash-crc64ecma: 13152405184612285600\r\nAge: 82723\r\nAli-Swift-Global-Savetime: 1767182651\r\nX-Cache: HIT TCP_HIT dirn:12:636617427\r\nX-Swift-SaveTime: Thu, 01 Jan 2026 05:00:22 GMT\r\nX-Swift-CacheTime: 25429\r\nTiming-Allow-Origin: *\r\nEagleId: 2ff6309e17672653742842701e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"fa64a9a79c6a0ba3b857bc4acca55105","sha1":"36b65cb77ce85e7308857ca336cd53c5b4d7e67e","sha256":"e219af8cb5d64ee4b3381f51ccb37344760f0a373c068ccaad15f5e3631c04df","sha512":"4a4dfaa25067b8f87838284141c1d43a1974b211992c646aeec73c522c910378e7d5f0d7fff602d7627898bc8925b09998ee1ade1f0ef0f017159761512adbec","ssdeep":"","tlshash":"3451d6ede17d32d4dbcc3816e6a8e282102181ffd8d83356255877dcc6041896b40bbb","first_seen":"2026-01-01T11:03:23.719047Z","last_seen":"2026-01-01T11:03:23.719047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":484,"dns":420,"connect":26,"send":0,"wait":30,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"avatar.filespeed.uno","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}