{"report_id":"c737e9d0-0327-4082-8462-081d46182822","version":0,"status":"done","tags":[],"date":"2026-09-15T13:38:24Z","url":{"schema":"http","addr":"regmad58979.cc/","fqdn":"regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"title":"Roblnhood","dom":{"size":21995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15656)","md5":"057a8641f1bd8858913d4584285e65a4","sha1":"0c248776946fc7d476bacf9339473c1224f46076","sha256":"da4d7cbf9fb0c13a855eac64ca8bbf36e3e5ca3a1560ec3198d1245abdac86fa","sha512":"a078cfad2423c0f9b59cbe45b3ea9f7d75428d491b8a99c8c773d5948aba28ee789eb49dfe176491ef0f1c129a6ccc58155464056394166bd75ab53458df5cfa","ssdeep":"384:A6qZCx4243+d5FpFBFIFOTF+FDNFza1/Ys7I:A/Qx424Qrz4OJ6DXza1/Ys7I","tlshash":"d6a2ceb1e14149a212bb8dc1e4607f1eb6a6e30fc156c8947ebc95c90fc3cb5f96a164","dom_hash":"domhash0035a79a76479182a5b1ef2aecaf55ce","first_seen":"2026-09-15T13:38:29.97837Z","last_seen":"2026-09-15T13:38:29.97837Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"regmad58979.cc/","fqdn":"regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:38:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.regmad58979.cc","ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-15T13:34:06.579825Z","last_seen":"2026-09-15T13:34:06.579825Z","alert_count":26,"request_count":26,"received_data":2677566,"sent_data":11958,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-09-04T15:56:11.897682Z","alert_count":0,"request_count":18,"received_data":1739936,"sent_data":10224,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.regmad58979.cc","ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-15T13:34:06.575494Z","last_seen":"2026-09-15T13:34:06.575494Z","alert_count":10,"request_count":11,"received_data":4968,"sent_data":6052,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"laomo47286.eu.cc","ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"1997-10-13","domain_rank":0,"first_seen":"2026-09-15T13:34:06.577495Z","last_seen":"2026-09-15T13:34:06.577495Z","alert_count":8,"request_count":8,"received_data":71339,"sent_data":4417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"regmad58979.cc","ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-15T13:34:06.575258Z","last_seen":"2026-09-15T13:34:06.575259Z","alert_count":1,"request_count":1,"received_data":172,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-eb32b0c8.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8ff7b6e2e2eb9ea571658f9f2def161","sha1":"bc684d0ffde601e207a2efb4fed8995b1136612c","sha256":"94417ac861305bf65441ecce4a27d2eedd06b399e798898a9dfcc45d153bec2f","sha512":"fd39c1b847f7911afdf3af168d044feeeb9082767f19061abc7828917a6924e439a9bc2ad2a2bda3f53dc6ec7c6c24a0b2c8d07c6c10d4eb5756f0b356a19301","ssdeep":"","tlshash":"c601d0f9fc1dcebb1f62164002a1360114091fddfa1415f198977e661be4950d7de72d","size":772,"data":"","first_seen":"2026-06-18T15:46:55.877488Z","last_seen":"2026-09-15T13:38:29.98781Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-15T16:13:23.282356Z","times_seen":1965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-15T16:13:23.284099Z","times_seen":4809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-15T16:33:08.055746Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-15T16:08:34.706396Z","times_seen":1655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"5252690e41525f1472a1d954506caff5","sha1":"2f2b682349c09b9f3fdfcf1c5ccb03974a604bf1","sha256":"8958936057cdc3d07034033eeae8f24c067e42a3884ad75a944089e4d6023a03","sha512":"ca20c55a16a7395b945a5d427b44ce2c60e2e11c96c6b61087566b62200af6885020b799ae1a9e808af662cfb39eae52dac6608b568bdd85151515864c35a6bb","ssdeep":"","tlshash":"3e11abfe191a60296303405e976b7901642650a9000a184273ccdb9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-15T13:34:14.063596Z","last_seen":"2026-09-15T13:38:30.031776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-15T16:02:30.95106Z","times_seen":42917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-15T16:02:30.951576Z","times_seen":44250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/vendor-a4be0d4e.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c16878e75d95bc483a804a24c4b0d149","sha1":"07384fb5e6e2090057f3598e046bde28db6d7c87","sha256":"0613aa25f7a1a45283b79871d471ecd7a90aee03ea439e9aa28d4f563db578d0","sha512":"172ff04e8a37c841c3bddc8df502095d988c4dd6e42aebb576e64386bf992346e9f4355004892564e378cdc9d6d77d7165b3a716caae6c4daa61c4a8d1edd798","ssdeep":"12288:mBP3z209CjnzfX2ooAPUEeUw9IX1a93b1sGk2JW4iZ6jkCkfFr2:mBP3z2HD/oaeUw9S1atBY2JW4iZ6jj","tlshash":"3e153ac97692f06147ab24e640bb0002f3396e59740e84a4f16dd8db7d7ad89d2b7f38","size":934244,"data":"","first_seen":"2026-09-15T13:34:14.00128Z","last_seen":"2026-09-15T13:38:29.998776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/en-2fa61606.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"89c4c965181bbbd4c572aa3cd1533e0d","sha1":"a796a857e7e2405eb4c2bd9ec757deac1373b3a2","sha256":"01f5f39ee9545716422fc0739c651ba6fcc6d94c577123c9d53330b88ca4ac40","sha512":"9c65524fdc80e79dfb65c522a657167ea4d87e8ebdc6f45121337b456d8745a6bee3d20a76dac1d79806399d3b6d1310c34341902ca6fec432f364e0a45b02f1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxe:JwponKOdzbE2rdEVLsPWqqLxe","tlshash":"0513c7893e16889a04f3636774ce6e6024f50ac18255841f4fedc9fd53d2b67b3a7728","size":43895,"data":"","first_seen":"2026-06-22T17:10:55.726573Z","last_seen":"2026-09-15T13:38:29.98171Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ff3b235d98dffafc7ed0aa1d332fb355","sha1":"35bbd3ec2bde01b19dd6008bdc1d0bc304046ba1","sha256":"9f4cfcc2c4a357fb7b59d31bd9a1a35d6d9c8a41ade4355dc36babe850200a46","sha512":"6f2615651114dab0460eff12675506e65047c70b496a26bed020c0f15fe38fce8b7b720d33ce8d097287fcca681a203eeb1693bd017be87eca21394b92a20385","ssdeep":"","tlshash":"e5c08cc4a0c22e005622641014af28e4a034402ab08d5b52cd99e84a3e620b0c237eac","size":148,"data":"","first_seen":"2025-02-02T00:35:42.28685Z","last_seen":"2026-09-15T14:39:40.384201Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-15T14:39:40.377337Z","times_seen":1112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-15T16:33:08.044612Z","times_seen":1401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-09-15T14:45:14.728493Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-7bdcb5bc.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0dca09383d3dba787772794fb0fda7","sha1":"3f2c410250af67a3dd327eb991a4e176a7e703fa","sha256":"dcbf3c80d57a93b989b2959b7ce30045a1b2d082bc9f025b4a9d51d9b4924140","sha512":"00986e3aa6c500da185808e7e54540c1a834512cf70748a4135150558a585d4018c7c55446c2506cb2330e5e9833b4f0155e8fc484a8254fbd2df66e9ce0ac31","ssdeep":"96:pzW+EHNnYb3ZqD+wHIk5rRbHEi1ZIqg3/3hjtj33XjhRKXtjZ:py+EH9YbJqiwHIqrRbkGuvhj1XbyZ","tlshash":"daa19689f80286fdaaa3948404580410369c7bf7b1184cf5f7beac0967b8ebad355765","size":4767,"data":"","first_seen":"2026-09-15T13:34:14.043857Z","last_seen":"2026-09-15T13:38:29.999515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T16:13:23.277559Z","times_seen":1672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-15T16:33:03.375639Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-09-15T13:45:45.285207Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-09-15T16:33:08.049065Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-15T13:45:45.282116Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-15T16:14:28.488708Z","times_seen":9727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/charting_library/charting_library.min.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T16:08:34.595313Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-15T14:47:56.837023Z","times_seen":1937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-6af8b52f.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dabeb8c0d59898fe86894f892877a686","sha1":"929cf9d0aec73d2f883694e52c535204b6c36470","sha256":"b57da3048fc51daba43810cfca42dbafb269c85f189dcc6437fb02fa8d851ec5","sha512":"b0d610e8bd5546b6040ec120aa580314c1207403505c7fc90f86000cf068795fc6c6b1cbcebfb5b6b24c30cc40cfbf77994713a1d26f048074b8dd08980b5fc5","ssdeep":"384:ksvuq3jyTQdvPuFVwN+fcpUDcZfQDBgZu9/FlPvj9GaCQ9rDVY:zvRfNKqN+fczm1vvj9GaCf","tlshash":"0852a396f5059a7ce1f7e011848c0001321e7fde900c8c96f5be6d8673a6ef8b759a1d","size":13847,"data":"","first_seen":"2026-09-15T13:34:14.05163Z","last_seen":"2026-09-15T13:38:30.022722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-15T14:39:40.385426Z","times_seen":844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-15T14:39:40.377971Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-09-15T15:59:59.8866Z","times_seen":2052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-15T16:33:08.04656Z","times_seen":2480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-09-15T14:39:40.382978Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-15T16:33:08.058286Z","times_seen":926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/filters-0e96b88c.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1f9f3f932e9f41436eff28b621b4fd0","sha1":"9aa6cd33d1eb70331039e79f8f9a1a941f7de6c4","sha256":"ba470e815b9c20ed639ea12e4b9b77d859cf0eb8a9a79383c475a02a8e39e4a6","sha512":"cc007c4542d033deee75b18dc1e9046e2b2f68c6b49bc9a8ffe3585d1dc21fda8622bab1df2c4a7140424bcfb4c1ce263314d3f948d3f2921fb1e9883ead8809","ssdeep":"","tlshash":"336123edf8d3613746fa6de94028851172cebe24786e0e4af55bd0426973888e07fb64","size":3424,"data":"","first_seen":"2026-09-15T13:34:14.038954Z","last_seen":"2026-09-15T13:38:29.996141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/currencyItem-319b9008.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c3667da19bcf1d77ce92f66e4b08fa3","sha1":"9fc44e219a130065d31e8ff0647b94ee13b2cbba","sha256":"05c40a55a01d201509adf76a35794167af4d6daf432612ed2646b74765ebc2dd","sha512":"ea8821026bacb3fd1271844c2a448ffe38a119b627affce0f0901b020ae2e9e53bd3a9948c9bab58ebc2ad349c52d2dc9eab06d291ad2d002ef478fbec02694b","ssdeep":"","tlshash":"6021df9aa902c7b1cabe906281bd4414171d7bea700185c1ebee048a379b6fcd738a31","size":1206,"data":"","first_seen":"2026-09-15T13:34:14.002979Z","last_seen":"2026-09-15T13:38:29.980863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/#/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-09-15T15:59:59.876387Z","times_seen":1977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-a2239e5e.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4439f8e3f77da5e1fdf5697c8d893086","sha1":"cad87f3631444c8eaef8878a5ac93a9577f4e946","sha256":"49dce9d3c3ddffb0661dc8262976e4b1d4c551cfd9b07a037c9c35ce056a904b","sha512":"d2dd3f87843107f7da0e94a890a7e693a386e8af967afac77f69ceed029c5d99a2c6d9d47fa377658917114c25f03e8050634f29e4bced13fbaf34b3b5a6631d","ssdeep":"1536:HmdjT/3qCuk+jwmrVFYI8+kr9auhXI/NK+yRCINC+Hq5:GdX3qCu1wm/krFhXI/NKoP5","tlshash":"16a34cc9940a0eff59ee0858ad1a9540217c2fa36dcccc9372ae6e5537facd5235e318","size":101395,"data":"","first_seen":"2026-09-15T13:34:14.037392Z","last_seen":"2026-09-15T13:38:30.025864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-ddd5198a.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.913Z","timestamp":1789479473913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-ddd5198a.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 15:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2812-d5a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3418,"size_decoded":1122,"mime_type":"text/css","magic":"ASCII text, with very long lines (3417)","md5":"16a7949e138ad2582b281b6b5a07fe5a","sha1":"468276d1c01d354aea49b056f9fcd3ee6aef3ad7","sha256":"ddd5198a834cb006dda6614f7732c7aa13a650e03f7399b614f83864de54f8cb","sha512":"1383317ebe5866661b7fb1de3c2ece14707b0f8bb4027e528fb25ad0d9bc276971df5aea4cf33b79dcf09761c48180e48e387c6e8ff6c51891605694caa8fc46","ssdeep":"","tlshash":"d76122aefe99023a5d37d9df9d0c5e9c8e002da2f0469cd6e04397350e8f6d3272414a","first_seen":"2026-06-18T15:46:55.846451Z","last_seen":"2026-09-15T13:38:29.979854Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/currencyItem-319b9008.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.915Z","timestamp":1789479473915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/currencyItem-319b9008.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:39:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c282a-4b6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":837,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"6c3667da19bcf1d77ce92f66e4b08fa3","sha1":"9fc44e219a130065d31e8ff0647b94ee13b2cbba","sha256":"05c40a55a01d201509adf76a35794167af4d6daf432612ed2646b74765ebc2dd","sha512":"ea8821026bacb3fd1271844c2a448ffe38a119b627affce0f0901b020ae2e9e53bd3a9948c9bab58ebc2ad349c52d2dc9eab06d291ad2d002ef478fbec02694b","ssdeep":"","tlshash":"6021df9aa902c7b1cabe906281bd4414171d7bea700185c1ebee048a379b6fcd738a31","first_seen":"2026-09-15T13:34:14.002979Z","last_seen":"2026-09-15T13:38:29.980863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/en-2fa61606.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.896Z","timestamp":1789479474896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/en-2fa61606.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:38:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2808-abcb\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43979,"size_decoded":13677,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43792)","md5":"89c4c965181bbbd4c572aa3cd1533e0d","sha1":"a796a857e7e2405eb4c2bd9ec757deac1373b3a2","sha256":"01f5f39ee9545716422fc0739c651ba6fcc6d94c577123c9d53330b88ca4ac40","sha512":"9c65524fdc80e79dfb65c522a657167ea4d87e8ebdc6f45121337b456d8745a6bee3d20a76dac1d79806399d3b6d1310c34341902ca6fec432f364e0a45b02f1","ssdeep":"768:JY/4tZcEw/o7rKOdAgPsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxe:JwponKOdzbE2rdEVLsPWqqLxe","tlshash":"0513c7893e16889a04f3636774ce6e6024f50ac18255841f4fedc9fd53d2b67b3a7728","first_seen":"2026-06-22T17:10:55.726573Z","last_seen":"2026-09-15T13:38:29.98171Z","times_seen":5,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/svg/light/user.svg?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.423Z","timestamp":1789479475423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Fri, 12 Jun 2026 16:41:05 GMT\r\netag: \"6a2c36a1-227\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":778,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-15T14:45:14.69974Z","times_seen":472,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.473Z","timestamp":1789479475473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf32ba91f651d41449ff5e5950b1c3ad6.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 112629\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35AFAD5B3037E9BBFF\r\nAccept-Ranges: bytes\r\nETag: \"0DAEADD93DED6B3C5DE34CB17C18387C\"\r\nLast-Modified: Tue, 08 Apr 2025 17:28:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13231990931681428578\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Da6t2T3tazxd40yxfBg4fA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":112629,"size_decoded":113206,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"0daeadd93ded6b3c5de34cb17c18387c","sha1":"17c2516cf0fe410cbf3abd29efe0081359ad0a1e","sha256":"be91fd0aa507b5779e9a0b38fabcc784536965a9f20bc1444343e584049d7e25","sha512":"882a4ef0f7d72e4903e51978ebcd7cbcbf3ab1f41ca7ede53212588e1c88db37e0b2d393fa0edc27ae63c7d4d9d910d845eaf88612ed3928038f68ea1d97f5fc","ssdeep":"3072:e0WEjagrkdEB58/3MQDPQiktwaKqAUkS61dm3LcL:e1sku4/3MLipa0IJI","tlshash":"61b302f2a3306546e0bd4570a3e69f7d875f0eb65046c5733829df7684060c4caabaeb","first_seen":"2024-08-29T18:12:05.895827Z","last_seen":"2026-09-15T13:38:29.986915Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2687,"timings":{"blocked":2083,"dns":0,"connect":0,"send":0,"wait":293,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-eb32b0c8.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.910Z","timestamp":1789479473910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-eb32b0c8.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Fri, 12 Jun 2026 15:38:58 GMT\r\netag: \"6a2c2812-304\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":772,"size_decoded":1008,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"e8ff7b6e2e2eb9ea571658f9f2def161","sha1":"bc684d0ffde601e207a2efb4fed8995b1136612c","sha256":"94417ac861305bf65441ecce4a27d2eedd06b399e798898a9dfcc45d153bec2f","sha512":"fd39c1b847f7911afdf3af168d044feeeb9082767f19061abc7828917a6924e439a9bc2ad2a2bda3f53dc6ec7c6c24a0b2c8d07c6c10d4eb5756f0b356a19301","ssdeep":"","tlshash":"c601d0f9fc1dcebb1f62164002a1360114091fddfa1415f198977e661be4950d7de72d","first_seen":"2026-06-18T15:46:55.877488Z","last_seen":"2026-09-15T13:38:29.98781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.regmad58979.cc/ws/64be1006-5e59-4082-acd1-8df468a4466c","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.943Z","timestamp":1789479473943,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /ws/64be1006-5e59-4082-acd1-8df468a4466c HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.regmad58979.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: c5/OPDbrzLeVPnl3CIjkUQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Tue, 15 Sep 2026 13:37:54 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://www.regmad58979.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6DgHKvYyxgZLpCk3WxhrIL2fl/w=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":0,"dns":47,"connect":281,"send":0,"wait":234,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getMt5Amount?coin=xag","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.895Z","timestamp":1789479474895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.455Z","timestamp":1789479475455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp8a1d3a40d8384febb7747ce48e682fce.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3391\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A34AB67323537BE47F5\r\nAccept-Ranges: bytes\r\nETag: \"0E83F87B663B1CEF21354B06AE01F593\"\r\nLast-Modified: Tue, 08 Apr 2025 17:37:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10489740580964031108\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DoP4e2Y7HO8hNUsGrgH1kw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3391,"size_decoded":3966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"0e83f87b663b1cef21354b06ae01f593","sha1":"e7753016588dc49f7a7d53df75958020b50abd33","sha256":"d2385c360b44175560f7af7c2bb4593ad29c4b462b751e791ec59638e9ade189","sha512":"40c06bd1c4e46dc29ac53ead0fb75548d62f36f2e6f180adbe9d03e6dc8e16e108cae727cd4a90a62e1832b340cd1ca4709cfd656c4c3c690846ffdd8829aec8","ssdeep":"","tlshash":"5c614b9b4fed4408ec04a5bda5e00fa3c2d133727f717ca775897814147a280bb605e5","first_seen":"2024-08-29T18:12:05.909426Z","last_seen":"2026-09-15T13:38:29.989282Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":-1,"dns":8,"connect":279,"send":0,"wait":282,"receive":0,"ssl":828},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_solusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.465Z","timestamp":1789479475465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_solusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\nlast-modified: Fri, 12 Jun 2026 15:56:16 GMT\r\netag: \"6a2c2c20-16b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5812,"size_decoded":6251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bc7eb3839fa419024d466729b76a863","sha1":"2c62b058343436b88c56a5c3bd3a7e751e20444d","sha256":"469b2921933e8d3581d9b9f629744f0ef3ae00737094bfde3bc79a0574580761","sha512":"385c083444cb0d6e78b5e46c0eeb54e11e4b47a83316d9a8518a3f30c93e2b87cdaa7e0ac3faba33d935ca8574edbb7fbe07b82324f7c48f62cad4703b2ae5d0","ssdeep":"96:jJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjPfHTie9b30Muw1F5LsXep:t89NAY5SmzbZ0KPwnWE07w1FGe","tlshash":"fdc18e18d2e5a4e335e8844767c5c21ad42d002c1206fd3252f9ed876a1bdfb9f2daf8","first_seen":"2025-06-04T17:05:58.571943Z","last_seen":"2026-09-15T14:39:40.281253Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1971,"timings":{"blocked":-1,"dns":330,"connect":233,"send":0,"wait":233,"receive":0,"ssl":1174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.469Z","timestamp":1789479475469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp65ce0857b9d24255a52a845abbb5ecb5.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36E613583338E9A65D\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-15T13:38:29.991249Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3348,"timings":{"blocked":2511,"dns":0,"connect":0,"send":0,"wait":292,"receive":545,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-e2e6fb6a.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:52.304Z","timestamp":1789479472304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-e2e6fb6a.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 15:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2802-4ac9a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306330,"size_decoded":66733,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"b2efb31b7afeb757d1109ff1f9c1b950","sha1":"e3acd9f16158c1aae96210331d48e10b3c151e9d","sha256":"e2e6fb6adab199382a40820cc85a0631636f776bc360008328b413e31b5601d9","sha512":"f9709f52fc2b0df73a3f0e70ccd8fcd3ff888f85d2ac2301cd1eacb025b3dadbaad8509b5e12b0715475be7c7fc1a5f022236c024112ad20681a6e320fa265ab","ssdeep":"6144:njvxsaTJ03EkZ8w71ZACkFDS3vyf58rBeV05T0:jv1+3dZ8w71ZACkFDS3vyf58rBeV05T0","tlshash":"3d54d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-09-15T13:34:14.047701Z","last_seen":"2026-09-15T13:38:29.991821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":927,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getMt5Amount?coin=xau","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.892Z","timestamp":1789479474892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.470Z","timestamp":1789479475470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpc3a2e089d4db4d378197c5466d8d7bcf.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 255863\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36794D103833B4188E\r\nAccept-Ranges: bytes\r\nETag: \"8E2D0D68EF7B3099A4FB1061C0847946\"\r\nLast-Modified: Tue, 08 Apr 2025 17:15:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9272553010199676724\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ji0NaO97MJmk+xBhwIR5Rg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":255863,"size_decoded":256439,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"8e2d0d68ef7b3099a4fb1061c0847946","sha1":"34771929afc985fe955dd91402ca7a8ad95fbb9e","sha256":"bcbbd14dc00035f42df40f6a691ca1175d915f10bc9ca034c90e55d5ed666325","sha512":"52beddfce84fb8188e0a2e2d8e7d1c51f1b7611f1202105719307cc42af6678f1b2f41602f628d4f7bfa9cb99dbe1864638fe8538ca55d9384c55c6e61b023ea","ssdeep":"6144:NmiyznjkBNvPf7btuII7tmFgGexE/IDEl5/WuOy:NmiykBRluv7ISTEl5/Oy","tlshash":"294423d8b87278b2cbef0db49c59f15a3977606ca1bbbcb3395ca1da54324646c041ca","first_seen":"2024-08-29T18:12:05.902596Z","last_seen":"2026-09-15T13:38:29.992726Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3105,"timings":{"blocked":2525,"dns":0,"connect":0,"send":0,"wait":292,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe5995527764a470a8cfd1bb38ed49b24.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.970Z","timestamp":1789479475970,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe5995527764a470a8cfd1bb38ed49b24.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 64430\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36B1E8233230DA49B8\r\nAccept-Ranges: bytes\r\nETag: \"E9D11537FE4424394C89FCB315ABA36C\"\r\nLast-Modified: Mon, 04 May 2026 13:04:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14511726364920392783\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 6dEVN/5EJDlMifyzFaujbA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":64430,"size_decoded":65006,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 735x412, components 3","md5":"e9d11537fe4424394c89fcb315aba36c","sha1":"5dee6c7f1c5cbe0b61fc0ad00cb43afae4b8c900","sha256":"355dbc61cd9ae2b41b46411e159a1e3855dae5ccec639afee22bca79d3e771a7","sha512":"fd3a82b670aaa684aea3c6385198c951fa923279c306f867c17541e50ec6ef9560943167f9467777afc40ab42facd2d6aeb4f8db4f9b7a1193a89b7cd21283c2","ssdeep":"1536:fts+VvFNa1hm3S0SQoKm7u5wnRvlHP11/5lTtOx:fa+VW2LSQQBRvxPz55C","tlshash":"8a5302d3ce44ae47cb9a9539e7f86fc83ed11a15c94ce0f15884a8145923344ba32fe6","first_seen":"2026-09-15T13:34:13.997702Z","last_seen":"2026-09-15T13:38:29.993432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2582,"timings":{"blocked":2023,"dns":0,"connect":0,"send":0,"wait":283,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.897Z","timestamp":1789479474897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.452Z","timestamp":1789479475452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp35c6b88242674795a227fc0ea3111981.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1562\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A34C78BAF323265D385\r\nAccept-Ranges: bytes\r\nETag: \"569A0DBD2FFA9B38F25CCBC8E6697778\"\r\nLast-Modified: Tue, 08 Apr 2025 17:35:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2778767496489567871\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VpoNvS/6mzjyXMvI5ml3eA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1562,"size_decoded":2136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 64x64, components 3","md5":"569a0dbd2ffa9b38f25ccbc8e6697778","sha1":"2b30ef6f52c6deb1da0ebdbb8bb0b068ace65d1a","sha256":"568a577fe1290cc61e1f99c712ae3ebbd973763c88961ebcadb4b41b1ead509a","sha512":"5ddcab2093fef6504c0777315e6f5a91fd5abbfe4de70773d355510fdaebb44a491e75cf576dd163742b516fd44392c0b2c60928406b782ea863ffc9f55133f0","ssdeep":"","tlshash":"9a314c439522b57dcd1304b5a8fe2a72cb037c0237f92c4f56c3a318d24b301284408c","first_seen":"2024-08-29T18:12:05.875464Z","last_seen":"2026-09-15T13:38:29.994075Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":-1,"dns":11,"connect":277,"send":0,"wait":282,"receive":0,"ssl":831},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/svg/light/zu29.svg?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.459Z","timestamp":1789479475459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Fri, 12 Jun 2026 16:41:10 GMT\r\netag: \"6a2c36a6-348\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1067,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-15T14:45:14.714553Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_dogeusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.466Z","timestamp":1789479475466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_dogeusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11836\r\nlast-modified: Fri, 12 Jun 2026 15:56:15 GMT\r\netag: \"6a2c2c1f-2e3c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11836,"size_decoded":12276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eeef89eabae7e3d8650ad2150e3b0887","sha1":"4edbaf7375d0af99116a391ad05ce98df9675395","sha256":"4bdbc7b214c49dbaf4c47428bf65301a06cc3d7e2ea0eaf13f64b6fa626f461b","sha512":"6347ee0956bd315606524e13dac38c0878658bf1dc4e3b1693bd320baa3e4ca43f8938624e1485fb7d581e280d2ea3b542a8d0ba49ccd79653de4a6dd6c5dd8c","ssdeep":"192:NDYjjEzY6uP/p8RE7wCgS7ug6EMFsY7VD4xmKwTkf/oyZazAo+eNKQ1jaTA5ugm+:BYjwzYjxEEHGgdMuY7VD4xbwofjkAozv","tlshash":"6832cf2bb430a17abc3d5bc38ce394ad3f41c3bad99228ce6e8c5452f6aa417d506305","first_seen":"2025-06-04T17:05:58.489322Z","last_seen":"2026-09-15T14:39:40.347095Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":781,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"regmad58979.cc/","fqdn":"regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:37:51.073Z","timestamp":1789479471073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:51 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://www.regmad58979.cc/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":45,"connect":233,"send":0,"wait":233,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/filters-0e96b88c.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.914Z","timestamp":1789479473914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/filters-0e96b88c.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:39:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2814-d60\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3424,"size_decoded":1454,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3401)","md5":"b1f9f3f932e9f41436eff28b621b4fd0","sha1":"9aa6cd33d1eb70331039e79f8f9a1a941f7de6c4","sha256":"ba470e815b9c20ed639ea12e4b9b77d859cf0eb8a9a79383c475a02a8e39e4a6","sha512":"cc007c4542d033deee75b18dc1e9046e2b2f68c6b49bc9a8ffe3585d1dc21fda8622bab1df2c4a7140424bcfb4c1ce263314d3f948d3f2921fb1e9883ead8809","ssdeep":"","tlshash":"336123edf8d3613746fa6de94028851172cebe24786e0e4af55bd0426973888e07fb64","first_seen":"2026-09-15T13:34:14.038954Z","last_seen":"2026-09-15T13:38:29.996141Z","times_seen":2,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getAllSetting","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.479Z","timestamp":1789479475479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/vendor-a4be0d4e.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:52.297Z","timestamp":1789479472297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/vendor-a4be0d4e.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2802-e4164\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":934244,"size_decoded":306844,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c16878e75d95bc483a804a24c4b0d149","sha1":"07384fb5e6e2090057f3598e046bde28db6d7c87","sha256":"0613aa25f7a1a45283b79871d471ecd7a90aee03ea439e9aa28d4f563db578d0","sha512":"172ff04e8a37c841c3bddc8df502095d988c4dd6e42aebb576e64386bf992346e9f4355004892564e378cdc9d6d77d7165b3a716caae6c4daa61c4a8d1edd798","ssdeep":"12288:mBP3z209CjnzfX2ooAPUEeUw9IX1a93b1sGk2JW4iZ6jkCkfFr2:mBP3z2HD/oaeUw9S1atBY2JW4iZ6jj","tlshash":"3e153ac97692f06147ab24e640bb0002f3396e59740e84a4f16dd8db7d7ad89d2b7f38","first_seen":"2026-09-15T13:34:14.00128Z","last_seen":"2026-09-15T13:38:29.998776Z","times_seen":2,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-7bdcb5bc.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.909Z","timestamp":1789479473909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-7bdcb5bc.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:38:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2812-129f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4767,"size_decoded":2333,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4760)","md5":"4f0dca09383d3dba787772794fb0fda7","sha1":"3f2c410250af67a3dd327eb991a4e176a7e703fa","sha256":"dcbf3c80d57a93b989b2959b7ce30045a1b2d082bc9f025b4a9d51d9b4924140","sha512":"00986e3aa6c500da185808e7e54540c1a834512cf70748a4135150558a585d4018c7c55446c2506cb2330e5e9833b4f0155e8fc484a8254fbd2df66e9ce0ac31","ssdeep":"96:pzW+EHNnYb3ZqD+wHIk5rRbHEi1ZIqg3/3hjtj33XjhRKXtjZ:py+EH9YbJqiwHIqrRbkGuvhj1XbyZ","tlshash":"daa19689f80286fdaaa3948404580410369c7bf7b1184cf5f7beac0967b8ebad355765","first_seen":"2026-09-15T13:34:14.043857Z","last_seen":"2026-09-15T13:38:29.999515Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp991383fc7b33434c8750cab71c7bf2ea.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.451Z","timestamp":1789479475451,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp991383fc7b33434c8750cab71c7bf2ea.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2651\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35B1E82332304A49B8\r\nAccept-Ranges: bytes\r\nETag: \"175763C0B64113077927C69D2DF363A0\"\r\nLast-Modified: Tue, 08 Apr 2025 17:34:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9952061289840066641\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: F1djwLZBEwd5J8adLfNjoA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2651,"size_decoded":3225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 94x94, components 3","md5":"175763c0b64113077927c69d2df363a0","sha1":"f490a7e5a0009178fef2d6c45492ab977a368f34","sha256":"6f30306d6fd6dfc96e249bb857b766f9f6864f5b1ba61ec50c7f0c4d31073189","sha512":"cbebb360379fe4c0d89c152fa5ac5774974075e4ffe002e086400740e6525663d37e5c661332c3793887c39179d54a9e89586277b3df488b14ffca8e75e26d45","ssdeep":"","tlshash":"0c514c8eeda1e806e5288e7807e3f700ca5bbaa470f3c33b9545649bd70619b6a13014","first_seen":"2024-08-29T18:12:05.918032Z","last_seen":"2026-09-15T13:38:30.000305Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2540,"timings":{"blocked":-1,"dns":12,"connect":278,"send":0,"wait":289,"receive":0,"ssl":1961},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getAllSetting","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.902Z","timestamp":1789479473902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":232,"send":0,"wait":235,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-101be40f.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.918Z","timestamp":1789479473918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-101be40f.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 15:39:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c283a-2b2f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11055,"size_decoded":2445,"mime_type":"text/css","magic":"ASCII text, with very long lines (11054)","md5":"3515558641f2c168267c4382af557af3","sha1":"8f9f58402258f7b5162709283a0c059b1464b8a3","sha256":"101be40fd4c4047bb9dab84de6e01c9dd0c0e2db25124e44c4ed1b9a7116b1b4","sha512":"cdf8552bcaa7f63e9f5d7e789329a25b13849f987b30dcf02d4ea7113501b37eb17fbcf5148c1d46a7a9d9cd77a81425b0c0261fe0217ac175cdd2020611ee5f","ssdeep":"96:U10AkE2UGCMFhvKn3jojXMp5mXUVM2tL0a5O7vHUbTGGS2c62r1u2Tvq3mrLVVw9:UW3CXToEYvCaX8wSWnLjqkC","tlshash":"5e326328f7946638ac3be1a76a944dcce11dba01e683ddd4f927a5610ddb6e31b3408c","first_seen":"2026-09-15T13:34:14.019662Z","last_seen":"2026-09-15T13:38:30.001482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/platform/dev/logo_144.png?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.398Z","timestamp":1789479474398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Jun 2026 15:38:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2803-15e7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":5865,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"aa2e7bdc723e3001d43ffb26d0c0bd23","sha1":"34731f8545510bc4c8d4d6360afc23592a224211","sha256":"85b070612326d69d22011affbbb10141f0b4d9c87c8ebbd8ea466e163bcef890","sha512":"0d9a1ee137440be264f3c32a361bb2d38928b7661d4de1a10cce7cebd35736344ed3ed653b92f13d1f6e3c519a2a4924d0fd96eacebd2384716cf267de03eb17","ssdeep":"96:We5NnYusuL3tJEFDMr7LTYzELeMWv5jjmHCP8uLkOX/8CtmX8WtGK1ZZf:WKNztJ0Arz8ELeMWdkA82X0d7Zf","tlshash":"61c17cede003ca86d11c520afbd90040a6103e6d5983d3c7c8de4d7e990a54b9afa6aa","first_seen":"2026-09-15T13:34:14.004595Z","last_seen":"2026-09-15T13:38:30.002461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_ethusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.461Z","timestamp":1789479475461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_ethusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8592\r\nlast-modified: Fri, 12 Jun 2026 15:56:15 GMT\r\netag: \"6a2c2c1f-2190\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8592,"size_decoded":9031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"720c85e9c535e6553a32389ce5c8c29f","sha1":"d89df3b6979132401c628711f825b7bc4590cc36","sha256":"b9646034a8dce0fe2f482365661937610ee4900b2e5041873b25ea8429c0bd36","sha512":"5f3587b41770a778f3592f29bd1b624ae91ed8ab8eab8cf9e966e6fe908bef2f2e4d3fd7dc02ee07061f402df04e3804b0eda3fc297a3a171ddef2950b75ea8a","ssdeep":"192:G89NAY5SmzbZ0KPw8PcCgrn4nn+KoXmktfbNUw6ts/eF3sFOY:L+mzRPJ0Cgen+H2IbNUts2FbY","tlshash":"1c02a01ad3f0a2865d6c4703114194ffdc1d604c54dadd0857fe2ae2b72e0bb9f66da0","first_seen":"2025-07-12T22:28:58.36598Z","last_seen":"2026-09-15T14:39:40.325043Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":334,"connect":236,"send":0,"wait":687,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.479Z","timestamp":1789479475479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/platform/dev/config.js?1789479473892","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.895Z","timestamp":1789479473895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /platform/dev/config.js?1789479473892 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Fri, 12 Jun 2026 15:38:46 GMT\r\netag: \"6a2c2806-18a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":630,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-09-15T14:45:14.711647Z","times_seen":568,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_bnbusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.464Z","timestamp":1789479475464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_bnbusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10384\r\nlast-modified: Fri, 12 Jun 2026 15:56:15 GMT\r\netag: \"6a2c2c1f-2890\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10384,"size_decoded":10824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce04d16efbaa543192615e13a7e5f7fb","sha1":"833ce284ffc85e0dac3ce2e2567cf2d7980ab9f1","sha256":"bc5207bb03a5312c2deec22bd4651d89257eec64fa8a036598df67699102d6db","sha512":"2cc7a3227d27bc8bf2ea13e0f7a63effe9165ad59e3549de1b03d6d44a833e56b7021531a47e09977f1220652625b6a817c9f09d1b027a776ed02a2c1e7e2612","ssdeep":"192:L89NAY5SmzbZ0KPw6XRiel0VM06UkRWrJeCY5rmzUZjYrOtPUxkL0O3b:Q+mzRPBRieq5ngWrJnfqjJPJ5b","tlshash":"0322c04c925132127af084057cc28a79905e335974bae1c5a99c165f3d3aceeef568a8","first_seen":"2025-09-18T10:45:14.088674Z","last_seen":"2026-09-15T14:39:40.347699Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1498,"timings":{"blocked":-1,"dns":331,"connect":235,"send":0,"wait":694,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.471Z","timestamp":1789479475471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpd2e4066eef574b0a808bd88c78f39a3b.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126750\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35AB673235372249F5\r\nAccept-Ranges: bytes\r\nETag: \"9D3DD62CB672561DCCCF81ED5C49A731\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14280964938837360927\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nT3WLLZyVh3Mz4HtXEmnMQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126750,"size_decoded":127327,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"9d3dd62cb672561dcccf81ed5c49a731","sha1":"5b9e5f09bf26ad485f0d5fb9e28eb174f065b744","sha256":"028e9028374f9ec529f0c565b90beb9cbfbf23eeb49c54f24c44e8f619fb2fa7","sha512":"6f2b36df6646a0f22dcb9e1cad3722cac29ae11a2af88d433c62d7f3b6d703a4a3f5aab65d6b777e4c80d9f96dcf09b28e8816249307c0c85a9673dd843f15c6","ssdeep":"1536:6VUlFXPlozlYC/nq4eJa+ZhiY07BFxyNrPhsWmTd8l9Pa8MVU33yCX7b/ZKzRvyS:jlFfIlYCWd3pSBHEiE2VA/hKzQMCS","tlshash":"95c312d38b6609acc01d1a3c8a63b3b769139218049d53a7dfb78492fb05b8d3c7259e","first_seen":"2024-08-29T18:12:05.893037Z","last_seen":"2026-09-15T13:38:30.00648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2425,"timings":{"blocked":1819,"dns":0,"connect":0,"send":0,"wait":290,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.474Z","timestamp":1789479475474,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef3a5cbc336f4438aac0ebb706604f70.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36AB67323537754BF5\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-15T13:38:30.007435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3161,"timings":{"blocked":2791,"dns":0,"connect":0,"send":0,"wait":290,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/type/defi_activity_type","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.480Z","timestamp":1789479475480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/fonts/Arial.ttf","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.518Z","timestamp":1789479473518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.regmad58979.cc/assets/index-e2e6fb6a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Fri, 12 Jun 2026 16:36:30 GMT\r\netag: \"6a2c358e-ff9e4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":1047256,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-15T16:09:46.947723Z","times_seen":2593,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.476Z","timestamp":1789479475476,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2ca546ee44044beea5878aabc5a8183d.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 239195\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36C78BAF3232FFD785\r\nAccept-Ranges: bytes\r\nETag: \"6AF00FF8B88B635BCFAE7B63FB73F63E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18217933153706741951\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: avAP+LiLY1vPrntj+3P2Pg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":239195,"size_decoded":239772,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"6af00ff8b88b635bcfae7b63fb73f63e","sha1":"c7c004eb309b3f3fd26a7e1e2654a7956de69f1f","sha256":"71522f2099167c896b3d5ab5d90391404a7c870cfdfa6f383a814f7d1af1fad1","sha512":"04203c46cb2ad1412789250d169a6affccc40bf85f04e7c88c756163fb647519b1477876f46fae6e386658aff21f8e70b7cc64f1745754da5e435eac8aef866c","ssdeep":"6144:UnE2BVTNiD//GLbVrXKO9w4tGZz1UVf9URf:UE2BBE/GLbIO9dt+GgV","tlshash":"a3342314d580e5e1c6b1833a59efa267b35f307cb3a20d7768e45533cbb8aa1ab10f51","first_seen":"2024-08-29T18:12:05.907057Z","last_seen":"2026-09-15T13:38:30.008706Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3626,"timings":{"blocked":3045,"dns":0,"connect":0,"send":0,"wait":286,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/charting_library/charting_library.min.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:52.295Z","timestamp":1789479472295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 16:34:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c3516-2a6b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10859,"size_decoded":3422,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T16:08:34.595313Z","times_seen":1660,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-bc011be9.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.912Z","timestamp":1789479473912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Fri, 12 Jun 2026 15:38:58 GMT\r\netag: \"6a2c2812-18d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":619,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-15T14:45:14.726183Z","times_seen":1572,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getCoinList","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.919Z","timestamp":1789479473919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":235,"send":0,"wait":233,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/common/getMt5Amount?coin=xap","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.898Z","timestamp":1789479474898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":448,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef36b24dad224a928716079f27ecf89a.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.454Z","timestamp":1789479475454,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef36b24dad224a928716079f27ecf89a.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2077\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A34AFAD5B303782B9FF\r\nAccept-Ranges: bytes\r\nETag: \"CE49D52EBC7098AA5A31BB59BC84AFCB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:36:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17786335225462329594\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zknVLrxwmKpaMbtZvISvyw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2077,"size_decoded":2652,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 94x94, components 3","md5":"ce49d52ebc7098aa5a31bb59bc84afcb","sha1":"15a27d9a3216e699ce0496a5106d34d0a3e6bfe7","sha256":"cad4136f044a7d9209c9974c68958e2b2ae3e56b54eaae39607487167db285a5","sha512":"f4d10c9d32a42aa786bad9a02c0f16882474776088a6deecb3fd56b3e7913dfbd47aef37960f55cd6bcdc0756c5de73dfceac0f4495f96c0e552eb59e57e36ce","ssdeep":"","tlshash":"17412c1d61868c20f2eb113b6bd46652fa1dbd1d58b301f71d96432450ef5592ca9042","first_seen":"2024-08-29T18:12:05.908274Z","last_seen":"2026-09-15T13:38:30.011058Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1429,"timings":{"blocked":-1,"dns":10,"connect":285,"send":0,"wait":281,"receive":0,"ssl":847},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/svg/light/zu447.svg?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.460Z","timestamp":1789479475460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Fri, 12 Jun 2026 16:41:11 GMT\r\netag: \"6a2c36a7-1a4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-09-15T14:45:14.697832Z","times_seen":545,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_btcusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.461Z","timestamp":1789479475461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_btcusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7130\r\nlast-modified: Fri, 12 Jun 2026 15:56:15 GMT\r\netag: \"6a2c2c1f-1bda\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7130,"size_decoded":7569,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36441b8c1738e01457c54a0056faa169","sha1":"ba29760bded8c06b8889b58ec58f149101b69653","sha256":"5c2068d84042e001d833bad39a7f4294e69aedb0802a3d6c6c80a54efc99379d","sha512":"61c9ccca1e309dd7c8cc88da2432749fd3a8c905fa919f2df85321a9686353d7a53e8eac0fdd9bfa3f13f045d1ebacebd0f93a385ccace59994c23f6d03b0f57","ssdeep":"192:AVP2cjhWtsbV+EwEAO3HqulF0V5qCCKcDcqbpDU:AVucjhWto+EWIOnT9cB2","tlshash":"4ee18ea762a59c6231214624fc8a59627567c022b0776993bfb8187672c5b3d7380b8a","first_seen":"2025-06-04T17:05:58.570745Z","last_seen":"2026-09-15T14:39:40.345286Z","times_seen":52,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":334,"connect":233,"send":0,"wait":232,"receive":1,"ssl":238},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_trxusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.467Z","timestamp":1789479475467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_trxusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10598\r\nlast-modified: Fri, 12 Jun 2026 15:56:16 GMT\r\netag: \"6a2c2c20-2966\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10598,"size_decoded":11038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4493b31c10b681f06ad4fd66fb36bc17","sha1":"7dd63bfb69e872c098cfefd05a12c2a303ec7622","sha256":"5fb5b00621008c4d9285796f63dee0ad9d9ce244edc8704fc23415e69b886198","sha512":"526eeef55cc755adf804c41badd07169ce20a497a420cd518f7566e294e9baea43a25e6cb669859dfa876916268a442d8521ed99c936a63cc5dddd6497089a4c","ssdeep":"192:g89NAY5SmzbZ0KPwnM3Y3suMnJc1Z+oh5YjTQL5Uq+upP7/OgsbCQwz9:x+mzRPA4aMJc1E3G3zz5sbCbz9","tlshash":"3422c00419d49127713c4063ac96213bd5899266006c2175dbcdfb23f72fabd4dd5cf8","first_seen":"2025-06-04T17:05:58.587825Z","last_seen":"2026-09-15T14:39:40.296069Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":781,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpce119c1075064164b344ecad193dc351.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.437Z","timestamp":1789479475437,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpce119c1075064164b344ecad193dc351.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7639\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35E61358333832A65D\r\nAccept-Ranges: bytes\r\nETag: \"17EB9F586891D29C671ADC333F561F76\"\r\nLast-Modified: Tue, 08 Apr 2025 17:33:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7496046712304874382\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: F+ufWGiR0pxnGtwzP1Yfdg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7639,"size_decoded":8213,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"17eb9f586891d29c671adc333f561f76","sha1":"1f0cdffe95fe5b891d76c22282d9448661ff15f8","sha256":"7da29f1be39cd2de5d57ac445b30653521a029ab821e3e138e5043d400470ee5","sha512":"afc1959041fbe63f2278b78c849d5cf02ee14582d03a8f6a95e38267fa49a3f30786988bd5d479014c8bd93cb044b91cc35be62dd9b0cba321097a017fde8ccb","ssdeep":"192:CSM8ikSfl5/HmwgEl9j5GlSFXjOPq/v3VYhV28/L8G:dM8ZCfPmCHjiwjOynkVwG","tlshash":"fef1aef4d015d0d092db233c4b76968bb2ede5702be918914be00dea94ad475e8c4bd9","first_seen":"2024-08-29T18:12:05.867211Z","last_seen":"2026-09-15T13:38:30.014724Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2559,"timings":{"blocked":-1,"dns":26,"connect":279,"send":0,"wait":288,"receive":0,"ssl":1965},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_ltcusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.463Z","timestamp":1789479475463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_ltcusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7038\r\nlast-modified: Fri, 12 Jun 2026 15:56:16 GMT\r\netag: \"6a2c2c20-1b7e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7038,"size_decoded":7477,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80566bf46c37249b2a0592f55edefa73","sha1":"e8170cef7e071f5c12337efb38c8c950a660b916","sha256":"c2cf6c63f82500f3ed187b88c26220f4c815145d8c562f755b86ce0c7ed7d3a7","sha512":"eaf9303323356cb3bbcf46b5c340e9d74a00059787e7159328b75ab8eeba8b3a5a90273cceb4dd4de7d0a74e3df4c752766828a0180f2c21a2fdb5d579eb9764","ssdeep":"96:AJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjU6MMJEypjaYm+zAf0WmJRog8CJ3sGA0v:m89NAY5SmzbZ0KPwJJtaYm+MfOAIcG","tlshash":"5ae1ae89d6f0d09b6ffc0007b560d24eb8cde1346589ad063faddd5fad1a81f2e15a40","first_seen":"2025-06-04T17:05:58.618444Z","last_seen":"2026-09-15T14:39:40.36709Z","times_seen":48,"resource_available":false,"data":null}},"time_used":2014,"timings":{"blocked":-1,"dns":332,"connect":233,"send":0,"wait":233,"receive":0,"ssl":1215},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.472Z","timestamp":1789479475472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp60614724ddfc40fca556b61f55b30e3e.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 244944\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36AFAD5B303799BDFF\r\nAccept-Ranges: bytes\r\nETag: \"99541A4058432FC8B2DF9AD26D6EEE3B\"\r\nLast-Modified: Tue, 08 Apr 2025 17:29:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11562487344152512719\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mVQaQFhDL8iy35rSbW7uOw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":244944,"size_decoded":245521,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"99541a4058432fc8b2df9ad26d6eee3b","sha1":"689593ccf0b44704b19aa67f8d43c204801d5975","sha256":"be4ff66527bf4e4a48af64fa49481b6cca9864d9afe563630744a2204d7ecc94","sha512":"d67de09d3b9313f66a0513fd8a322362b3c2b6ad26466e687e81540a59e5ca9769d60ad33508047e08aa7cad9f1d70c71eb9beea508fd5cffdc67ae1d0ba7193","ssdeep":"6144:gRGn1e5WwkyFUwG1oChc+UBO95+eHQ+cBKVkeJLWd1H1f7POv:De5laHdJmO95+bObJLWdTjm","tlshash":"9134230ba890a155f8e07f5328dd5db719aa385ff7c8b158c49ea4e93522314fc7af02","first_seen":"2024-08-29T18:12:05.90357Z","last_seen":"2026-09-15T13:38:30.016649Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3310,"timings":{"blocked":2686,"dns":0,"connect":0,"send":0,"wait":299,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.477Z","timestamp":1789479475477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp15ee59b05cb14108be51f835493c2c0e.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126395\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36C78BAF3232AAD685\r\nAccept-Ranges: bytes\r\nETag: \"5021CD447181A2BE27D8B8A3CB9F7D1E\"\r\nLast-Modified: Tue, 08 Apr 2025 17:31:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5244213128299386486\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UCHNRHGBor4n2Lijy599Hg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":126395,"size_decoded":126971,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"5021cd447181a2be27d8b8a3cb9f7d1e","sha1":"01db3e026290149b3915861cc952eb8915a79eb4","sha256":"ce03288d7b5b2b5d23b4f17af76cb32d388cf921994dc73b4e32238d92aa5661","sha512":"98a159f1a672c22949f4e3b9adfaa4c1e7f48332100a2b4b47c42e323930cddbe1121b7bb6a506f4fe0b47fa66902344e44751fac1501ce77cf3dac4ff949a1d","ssdeep":"3072:mSs4NUd6Tvdf7hl8rzU6CveFFT/W8F7/GnKrtHvrLS:6OTvdrYU6CvQF7W8FLXRPy","tlshash":"e7c31273d55abc9be35c8b39e0e7842a387631092a4a757d8526cd3b104863b0fa1ed7","first_seen":"2024-08-29T18:12:05.898154Z","last_seen":"2026-09-15T13:38:30.017733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3045,"timings":{"blocked":2444,"dns":0,"connect":0,"send":0,"wait":284,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.regmad58979.cc/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.478Z","timestamp":1789479475478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.regmad58979.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.regmad58979.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"webapi.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/vendor-4403ead3.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:52.302Z","timestamp":1789479472302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/vendor-4403ead3.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 15:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c2802-16c33\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93235,"size_decoded":37984,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"3f2c7c11bc75e1c780824010f462b032","sha1":"0acc763f04d5838b2b029b341b5104a89ee0c585","sha256":"4403ead3789b29ab48a876aeffabd2dbbae4822829cedabe40430d5365d0f6fb","sha512":"63db33655374dbf69aa50bd7f88200ff2ffb5f4272eca9ccd54787d715f7bedb42158711908985c0ee887bcfc3d6dc1d1556be767966f4665b38012d989413aa","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Lb:BnNIClDsIxuVS83b","tlshash":"1a93d4a5a5c461fc6f2ae2659b8766e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2026-04-27T17:20:10.611354Z","last_seen":"2026-09-15T13:38:30.018447Z","times_seen":18,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/fonts/DINOT-Medium.otf","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.213Z","timestamp":1789479475213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.regmad58979.cc/assets/index-e2e6fb6a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Fri, 12 Jun 2026 16:36:30 GMT\r\netag: \"6a2c358e-11d88\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73338,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-09-15T16:09:47.037915Z","times_seen":2047,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"laomo47286.eu.cc/local-assets/logos/binance_xrpusdt.webp?2.0.1777822677435","fqdn":"laomo47286.eu.cc","domain":"laomo47286.eu.cc","tld":"eu.cc"},"ip":{"addr":"202.61.130.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.462Z","timestamp":1789479475462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"laomo47286.eu.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 08:46:43 GMT","end":"Mon, 09 Nov 2026 08:46:42 GMT"},"fingerprint":{"sha1":"83:96:6B:F2:FE:16:7D:7F:52:24:24:BE:3A:E8:2C:A9:66:69:A0:8F","sha256":"36:E3:11:75:69:C0:90:33:0A:1B:A9:B2:FD:F7:F9:C9:FE:EF:81:7D:68:75:55:05:10:FE:6B:A6:05:D3:04:72"}}},"request":{"raw":"GET /local-assets/logos/binance_xrpusdt.webp?2.0.1777822677435 HTTP/1.1\r\nHost: laomo47286.eu.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6434\r\nlast-modified: Fri, 12 Jun 2026 15:56:16 GMT\r\netag: \"6a2c2c20-1922\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6434,"size_decoded":6873,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd81dc4944037aa5eaf98f2c66aec1ab","sha1":"3eb3ad5464782853a92d1a2ff82cdc84e64bf0f6","sha256":"922ecaf521352093f1bd036492e59949903a3114d9ae422ab20ea42ce4a07725","sha512":"71572cfe28330cd1ff4f8765938a50c73b48f56aa91c3de117909321832c430133d20ead014897aaae1b8ca5c09eb126d6cf6c7ad4af0d5c1846b9aa39c39b87","ssdeep":"192:QC6w/0fGrd0d4gXuzUUXJ+UShSlbJeOWHdZm9Ry82q:Qgeqd0WmuzLA3hyfyw","tlshash":"23d19ecacb8ee84948bfec4ec5a916fd01f84f41b40d1d6704dc889cf2576e1592da35","first_seen":"2026-05-07T20:34:44.802471Z","last_seen":"2026-09-15T14:39:40.30682Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":333,"connect":241,"send":0,"wait":682,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"laomo47286.eu.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.435Z","timestamp":1789479475435,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp72fe870f6d404fffb20fa1662b9f5e94.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3770\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A34794D103833DB158E\r\nAccept-Ranges: bytes\r\nETag: \"AC57F69A059B27E9B7E2D71F7B556AF6\"\r\nLast-Modified: Tue, 08 Apr 2025 17:33:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14146020860961096738\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rFf2mgWbJ+m34tcfe1Vq9g==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3770,"size_decoded":4345,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ac57f69a059b27e9b7e2d71f7b556af6","sha1":"1af6532d57f9c61f890786bf897ec556ed11a9d0","sha256":"8cb942606d3bbf90682e4e49d691e1b5e761309e17d2b4451f34c10071a41d9f","sha512":"05566aebfddbc7a582225c09246c248c8f1c810b9aa1f40d3bb3fb17afd1d45e55f79e43e40a6ed2dd9c2d0dfbb76ccd8d876e74e16f576be438878326d22896","ssdeep":"","tlshash":"3d715c76d6f5786d9e5d516e12f0771be09eb11831d42341a71b5081382bfa43bb8e07","first_seen":"2024-08-29T18:12:05.864836Z","last_seen":"2026-09-15T13:38:30.020544Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1686,"timings":{"blocked":-1,"dns":28,"connect":1292,"send":0,"wait":281,"receive":0,"ssl":842},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpf9890e666df54565ae682be531012c08.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.456Z","timestamp":1789479475456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpf9890e666df54565ae682be531012c08.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2467\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35AB673235375848F5\r\nAccept-Ranges: bytes\r\nETag: \"E7769DC09F94AE578022F8221612BC48\"\r\nLast-Modified: Tue, 08 Apr 2025 17:43:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3717875445481473298\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 53adwJ+UrleAIvgiFhK8SA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2467,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e7769dc09f94ae578022f8221612bc48","sha1":"90f514b55b228f1a2e75b41fddf743ebb3c7d012","sha256":"1ff7c9a67232412db2343237ed0d10b4a91be674bc12d313271f8a0561310f82","sha512":"25e8eeb9005e5c5309f745d718167f29442c8ada411abbb45648d18a2e1d656a15e39739ca2f0702dc29e47e7cb342c29ec34d70c0224cbdfe7b01e8139e4110","ssdeep":"","tlshash":"6b513d4a82555123fbd8c77482cca9c804b503b954a92c942c369e86ee4ec75a75d19c","first_seen":"2024-08-29T18:12:05.880996Z","last_seen":"2026-09-15T13:38:30.021291Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1678,"timings":{"blocked":1401,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:37:51.835Z","timestamp":1789479471835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 00:21:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8f82fe-148b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5259,"size_decoded":2064,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"30010aa163d3cd12512ab69580707866","sha1":"e21646e97bd869bed2cd84987e1a6296260d377e","sha256":"114c1ccf70e7ed65fe56583c75fcf65ee1a6221fc7b71d942a2d14fde239a0e9","sha512":"f25f912fa116a6b7297bc1d312a50c9be02ceb5dad923a910a208767e790c76bc1a0022f5cfae69ab207b2b4374327d6fd38dc7800f3943650813ba9921995ba","ssdeep":"96:Tr82yk5yKuc67ggcdJNt/hSr6TCZydHRH/ge2mUsGKAiowGpuB1niHriHbH/w:TFpL67CeZCxfP2nfD3bpuB1niLi7fw","tlshash":"30b151b3acf0c86a2352013beedbb4189e61119386195854b4cd90ed8fd4fe584dbbb4","first_seen":"2026-09-15T13:34:14.024768Z","last_seen":"2026-09-15T13:38:30.021941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":3,"connect":232,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-6af8b52f.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.908Z","timestamp":1789479473908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-6af8b52f.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jun 2026 15:39:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c283a-3617\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13847,"size_decoded":4148,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13846)","md5":"dabeb8c0d59898fe86894f892877a686","sha1":"929cf9d0aec73d2f883694e52c535204b6c36470","sha256":"b57da3048fc51daba43810cfca42dbafb269c85f189dcc6437fb02fa8d851ec5","sha512":"b0d610e8bd5546b6040ec120aa580314c1207403505c7fc90f86000cf068795fc6c6b1cbcebfb5b6b24c30cc40cfbf77994713a1d26f048074b8dd08980b5fc5","ssdeep":"384:ksvuq3jyTQdvPuFVwN+fcpUDcZfQDBgZu9/FlPvj9GaCQ9rDVY:zvRfNKqN+fczm1vvj9GaCf","tlshash":"0852a396f5059a7ce1f7e011848c0001321e7fde900c8c96f5be6d8673a6ef8b759a1d","first_seen":"2026-09-15T13:34:14.05163Z","last_seen":"2026-09-15T13:38:30.022722Z","times_seen":2,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/currencyItem-60d85ee8.css","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:53.917Z","timestamp":1789479473917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/currencyItem-60d85ee8.css HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 15:39:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c282a-6d6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":732,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"1089970c70c80c7202c76af80156cac9","sha1":"c85254b66ce1b056fec523057b79da4889c136d9","sha256":"60d85ee8da3a27266c72c465a77ff03384a9776be9ae03b980eb193309676fe9","sha512":"628494baa060e49ba3eaa5dcd330f03d54b6fdd995eb23795ad098b214db3e5c95861487d28dc8333a3c1c01c5200869432354ecf46c4a29cf78adfd6db7868e","ssdeep":"","tlshash":"c2314fe4d3160374d93ac8966ea4018cd0543b829057dac9f48ffe1b5fcb6d31b70969","first_seen":"2025-06-19T02:24:45.85215Z","last_seen":"2026-09-15T14:39:40.313421Z","times_seen":18,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/svg/light/mengbanzu12.svg?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.457Z","timestamp":1789479475457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Fri, 12 Jun 2026 16:40:42 GMT\r\netag: \"6a2c368a-322\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1029,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-09-15T14:45:14.713927Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.475Z","timestamp":1789479475475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp55f53f107598465c8231e9a11cf3a29a.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109572\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A36AB673235378F4AF5\r\nAccept-Ranges: bytes\r\nETag: \"440CBE77674A730D672DE16899862FFB\"\r\nLast-Modified: Tue, 08 Apr 2025 17:30:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053394575354269543\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RAy+d2dKcw1nLeFomYYv+w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109572,"size_decoded":110148,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"440cbe77674a730d672de16899862ffb","sha1":"8cf70e0ed50ce4ef8d0185d45abc121ee0525cae","sha256":"42d66c6c6f9483e678f137b9cd29c14c88bedf815dcb7454d7cd03160c923d6a","sha512":"4754244bc1be99df8f456441cefb8dc13787b841cd840b473f634ac78265ef613857dc6d1450908b5412cee5e6b7d09f16fbf31b90185914439e20746975221c","ssdeep":"1536:6GE8uzA+S4xqE83K7O5zETHz3TPFQ4Ix2xg/YuDQ9nTBZyX7+oz7dB5zQOXquOme:C9qUS0HXuz4kd71b5QBu7NQ","tlshash":"99b302108f94d7c8d7172f35469e8ad1befa14ad34036e972bfa490b2d5aa748c0cdc6","first_seen":"2024-08-29T18:12:05.89455Z","last_seen":"2026-09-15T13:38:30.007435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2791,"timings":{"blocked":2425,"dns":0,"connect":0,"send":0,"wait":285,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/assets/index-a2239e5e.js","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:52.296Z","timestamp":1789479472296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /assets/index-a2239e5e.js HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Aug 2026 06:39:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a93d026-18c13\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101395,"size_decoded":27644,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"4439f8e3f77da5e1fdf5697c8d893086","sha1":"cad87f3631444c8eaef8878a5ac93a9577f4e946","sha256":"49dce9d3c3ddffb0661dc8262976e4b1d4c551cfd9b07a037c9c35ce056a904b","sha512":"d2dd3f87843107f7da0e94a890a7e693a386e8af967afac77f69ceed029c5d99a2c6d9d47fa377658917114c25f03e8050634f29e4bced13fbaf34b3b5a6631d","ssdeep":"1536:HmdjT/3qCuk+jwmrVFYI8+kr9auhXI/NK+yRCINC+Hq5:GdX3qCu1wm/krFhXI/NKoP5","tlshash":"16a34cc9940a0eff59ee0858ad1a9540217c2fa36dcccc9372ae6e5537facd5235e318","first_seen":"2026-09-15T13:34:14.037392Z","last_seen":"2026-09-15T13:38:30.025864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/platform/dev/favicon.ico?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:54.400Z","timestamp":1789479474400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:54 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5607\r\nlast-modified: Fri, 12 Jun 2026 15:38:43 GMT\r\netag: \"6a2c2803-15e7\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":5835,"mime_type":"image/x-icon","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"aa2e7bdc723e3001d43ffb26d0c0bd23","sha1":"34731f8545510bc4c8d4d6360afc23592a224211","sha256":"85b070612326d69d22011affbbb10141f0b4d9c87c8ebbd8ea466e163bcef890","sha512":"0d9a1ee137440be264f3c32a361bb2d38928b7661d4de1a10cce7cebd35736344ed3ed653b92f13d1f6e3c519a2a4924d0fd96eacebd2384716cf267de03eb17","ssdeep":"96:We5NnYusuL3tJEFDMr7LTYzELeMWv5jjmHCP8uLkOX/8CtmX8WtGK1ZZf:WKNztJ0Arz8ELeMWdkA82X0d7Zf","tlshash":"61c17cede003ca86d11c520afbd90040a6103e6d5983d3c7c8de4d7e990a54b9afa6aa","first_seen":"2026-09-15T13:34:14.004595Z","last_seen":"2026-09-15T13:38:30.002461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.regmad58979.cc/resource/svg/light/mengbanzu13.svg?2.0.1777822677435","fqdn":"www.regmad58979.cc","domain":"regmad58979.cc","tld":"cc"},"ip":{"addr":"202.61.130.40","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.458Z","timestamp":1789479475458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"regmad58979.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 05:35:39 GMT","end":"Sat, 28 Nov 2026 05:35:38 GMT"},"fingerprint":{"sha1":"9D:59:5D:E0:FA:01:9E:1C:11:44:4F:D7:BB:5F:37:15:9C:0C:3C:4D","sha256":"1A:E2:15:D0:7F:85:8C:7E:8E:4C:7C:4D:F2:3F:C2:FE:EE:01:A9:D5:3E:FF:D9:BF:1D:A8:92:9F:F2:A1:3E:80"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1777822677435 HTTP/1.1\r\nHost: www.regmad58979.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 15 Sep 2026 13:37:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 12 Jun 2026 16:40:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2c368a-4b2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-09-15T14:45:14.70903Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.regmad58979.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1777822677435","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.regmad58979.cc/","date":"2026-09-15T13:37:55.468Z","timestamp":1789479475468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp2003369b08864f67a7bdbc3bd4f5e2d6.jpg?2.0.1777822677435 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 15 Sep 2026 13:37:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 158333\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA94A35794D10383398168E\r\nAccept-Ranges: bytes\r\nETag: \"BCF7364A8C40D33BDF433C04B622ED15\"\r\nLast-Modified: Tue, 08 Apr 2025 17:14:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11597926574612920846\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vPc2SoxA0zvfQzwEtiLtFQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":158333,"size_decoded":158910,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"bcf7364a8c40d33bdf433c04b622ed15","sha1":"0707d502e220ef4bae31d2f47a49cd7ab01b7ec8","sha256":"bca853b8b0cfaea97eb2ae60c122d04c7f294731b070d2ae7c8f6e88484cd3da","sha512":"d2012cae485fd4410b8c0ffe90a28a6ae00746acee0b2a4c7d15d060ce765817366c60e9c2711a514558cdc2a82f52e7c540a70dfe097cd0ee9c6229b99806f8","ssdeep":"3072:NbIOHcmiNEnjlOqcAVwF1yFktsnq/HniEj2foXt1q5VABND2cp0cQnU:xIOYqjlOqca2yMQqfzUVAnZQU","tlshash":"80f3122ea2f21941d64296b765617d630daee8072f41e12b68d03996c3323fc5f722d7","first_seen":"2024-08-29T18:12:05.897064Z","last_seen":"2026-09-15T13:38:29.991249Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2525,"timings":{"blocked":1676,"dns":0,"connect":0,"send":0,"wait":289,"receive":560,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}