{"report_id":"d29f3636-b084-4b28-9c86-0bda5cd5f3fb","version":0,"status":"done","tags":[],"date":"2026-09-22T21:25:22Z","url":{"schema":"http","addr":"bandizip.dev/","fqdn":"bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.bandizip.dev/","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"title":"Bandizip-快速、可靠的全平台压缩工具","dom":{"size":68896,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41479)","md5":"fc85810a4d88588886131b37e33d9f8e","sha1":"1a2f3e038b3b90daf5df4a903cfb02feb2ab7649","sha256":"70c3afc856ca2cd2b362526fe5f340cfbcfee92801cc28d1816fba85e365ce81","sha512":"898c49c683027041bb275de3a13dbf1ecd444dc24b0735830617ecf06266e56489de8f40ad953873f9b4465bca9228231136c5b41a19237f603c675bb747e8b7","ssdeep":"1536:acqtf5gqtoIXnIIgeepISrmjgyEDc+y3pbQ7n:BEgXt","tlshash":"40637577e1e1336ab1978fc862d9b32c21236297f0822154eb671d586cc0debb43d95e","dom_hash":"domhashf6a3b7aa4a757a7a1aa2331b60b09ae6","first_seen":"2026-09-22T21:25:27.403785Z","last_seen":"2026-09-22T21:25:27.403785Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bandizip.dev/","fqdn":"bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":0,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T21:25:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bandizip.dev","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":406,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.bandizip.dev","ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":369853,"sent_data":2515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bandizip.dev/","fqdn":"bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:24:49.560Z","timestamp":1790112289560,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bandizip.dev/","fqdn":"bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":80,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:24:53.684Z","timestamp":1790112293684,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 21:24:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://www.bandizip.dev/\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":3,"connect":265,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bandizip.dev/","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:24:54.222Z","timestamp":1790112294222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bandi-zip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:29:59 GMT","end":"Thu, 17 Dec 2026 16:29:58 GMT"},"fingerprint":{"sha1":"E6:BE:EB:1F:D7:69:22:2B:AA:7E:DD:8E:B9:F1:CC:34:15:84:1C:95","sha256":"C3:3A:2C:AF:B6:1A:A2:CE:03:D8:80:F5:79:92:C5:69:C0:CE:3D:C5:F1:AA:AA:E4:2A:2F:01:89:69:E7:9F:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 21:24:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-ua-compatible: IE=edge,chrome=1\r\nx-powered-by: PbootCMS\r\nset-cookie: lg=cn; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lg","value":"cn","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lg=cn; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69059,"size_decoded":10181,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41479)","md5":"780b0d8d6e3f574a47d0db3db0c03389","sha1":"a1e20fe4691b98b8eca72aef762e1d1b8b7ecb0f","sha256":"91bd1d37d54d4c77a74a0d2031144cc518649020bf6e215b2922faf9d403f3bb","sha512":"d6123392f71678e7813b224f6b2cfb47dc9eb5a2445a2cf4f545e4856d98bf350bc241b946614d4a5ed9a66fb96aa793285bdea480fe14c5a5b1d82ca163a8e9","ssdeep":"1536:OUqtf5gqtoIXnIIgeep/SrmjgyEDc+y3pbQ7t:tEg6L","tlshash":"1c637577d1e1336ab1978fc862d9b32c21236297f0822154eb671d58acc0debb43d95e","first_seen":"2026-09-22T21:25:27.406085Z","last_seen":"2026-09-22T21:25:27.406085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":3,"connect":300,"send":0,"wait":321,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bandizip.dev/template/bandizip/css/styles.css","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bandizip.dev/","date":"2026-09-22T21:24:55.344Z","timestamp":1790112295344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bandi-zip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:29:59 GMT","end":"Thu, 17 Dec 2026 16:29:58 GMT"},"fingerprint":{"sha1":"E6:BE:EB:1F:D7:69:22:2B:AA:7E:DD:8E:B9:F1:CC:34:15:84:1C:95","sha256":"C3:3A:2C:AF:B6:1A:A2:CE:03:D8:80:F5:79:92:C5:69:C0:CE:3D:C5:F1:AA:AA:E4:2A:2F:01:89:69:E7:9F:65"}}},"request":{"raw":"GET /template/bandizip/css/styles.css HTTP/1.1\r\nHost: www.bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bandizip.dev/\r\nCookie: lg=cn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 21:24:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Aug 2026 08:45:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7ae10e-cd4d\"\r\nexpires: Wed, 23 Sep 2026 09:24:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52557,"size_decoded":10251,"mime_type":"text/css","magic":"ASCII text, with very long lines (366)","md5":"a419e90b6e54fa13a4fdc0a5eaf7ec30","sha1":"456580df75ce57e9dd64dec0de958a996616ad46","sha256":"e8c0bf57b40012c311b1e83dacb87025c305b60e9f675b03f3f1926aea868507","sha512":"ee1ba94389a4c9189548c921641e5e3894787ba942e08ee441b3ba0973fa65be06f7272401f7ba822e2a4804817c86f45f507e5b20e0294d2f5c0a91123cb5a6","ssdeep":"768:dUK23s6l2bQX2oOqdOevI5aX6ZK/UUW4c/kZ9:x23s6gb4POqdOevI5amK/UUW4c/kZ9","tlshash":"fa33752773307239f177a7b9be86e786a214e013a10426fd9ed5100dc18e1b916b6f9b","first_seen":"2026-09-22T21:25:27.407578Z","last_seen":"2026-09-22T21:25:27.407578Z","times_seen":1,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bandizip.dev/Spider/?url=%2F","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bandizip.dev/","date":"2026-09-22T21:24:55.346Z","timestamp":1790112295346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bandi-zip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:29:59 GMT","end":"Thu, 17 Dec 2026 16:29:58 GMT"},"fingerprint":{"sha1":"E6:BE:EB:1F:D7:69:22:2B:AA:7E:DD:8E:B9:F1:CC:34:15:84:1C:95","sha256":"C3:3A:2C:AF:B6:1A:A2:CE:03:D8:80:F5:79:92:C5:69:C0:CE:3D:C5:F1:AA:AA:E4:2A:2F:01:89:69:E7:9F:65"}}},"request":{"raw":"GET /Spider/?url=%2F HTTP/1.1\r\nHost: www.bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bandizip.dev/\r\nCookie: lg=cn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 21:24:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-ua-compatible: IE=edge,chrome=1\r\nx-powered-by: PbootCMS\r\nset-cookie: lg=cn; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lg","value":"cn","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lg=cn; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":493,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T23:48:35.854858Z","times_seen":18608177,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bandizip.dev/template/bandizip/assets/bandizip-hero-optimized.jpg","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bandizip.dev/","date":"2026-09-22T21:24:55.378Z","timestamp":1790112295378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bandi-zip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:29:59 GMT","end":"Thu, 17 Dec 2026 16:29:58 GMT"},"fingerprint":{"sha1":"E6:BE:EB:1F:D7:69:22:2B:AA:7E:DD:8E:B9:F1:CC:34:15:84:1C:95","sha256":"C3:3A:2C:AF:B6:1A:A2:CE:03:D8:80:F5:79:92:C5:69:C0:CE:3D:C5:F1:AA:AA:E4:2A:2F:01:89:69:E7:9F:65"}}},"request":{"raw":"GET /template/bandizip/assets/bandizip-hero-optimized.jpg HTTP/1.1\r\nHost: www.bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bandizip.dev/\r\nCookie: lg=cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 21:24:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 10 Aug 2026 15:53:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79f3e3-33f5c\"\r\nexpires: Thu, 22 Oct 2026 21:24:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212828,"size_decoded":207875,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1536x1024, components 3","md5":"69d857d040aec9a9815f70551baeb50e","sha1":"7aac49eeb0c1cac37a11be2dc135188f1982185d","sha256":"ba4a14234e590d7d187db1bb0fbe942fdf0874a8da54cc937722cdb5f28d12e2","sha512":"469bd7cdaa14e19058e0240c74178f14c649a3273e81ffc65650ecbefc0e0ce1cc31f737739a0b57753df6bdff40295fa9a3b7c187946c12d1cfee51a4fd376a","ssdeep":"3072:uEYgHiS9a8gbOyVwQbWQXVAeZokdyAXqSu1NjkbA/T+pwxUdyxASGFTfDj:ZFGvNPXrzdGQA/TpUdygf","tlshash":"262412b19111ba6b64adf003b8e81d216458ef7bd2619900385f2efff2cd714786c5ba","first_seen":"2026-09-22T21:25:27.408696Z","last_seen":"2026-09-22T21:25:27.408696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bandizip.dev/favicon.ico","fqdn":"www.bandizip.dev","domain":"bandizip.dev","tld":"dev"},"ip":{"addr":"206.119.175.11","port":443,"asn":133199,"as":"SonderCloud Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bandizip.dev/","date":"2026-09-22T21:24:55.786Z","timestamp":1790112295786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bandi-zip.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:29:59 GMT","end":"Thu, 17 Dec 2026 16:29:58 GMT"},"fingerprint":{"sha1":"E6:BE:EB:1F:D7:69:22:2B:AA:7E:DD:8E:B9:F1:CC:34:15:84:1C:95","sha256":"C3:3A:2C:AF:B6:1A:A2:CE:03:D8:80:F5:79:92:C5:69:C0:CE:3D:C5:F1:AA:AA:E4:2A:2F:01:89:69:E7:9F:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bandizip.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bandizip.dev/\r\nCookie: lg=cn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 21:24:55 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 32992\r\nlast-modified: Thu, 20 Aug 2026 19:54:06 GMT\r\netag: \"6a875b5e-80e0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32992,"size_decoded":33434,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"954e02759674cc701bc2c9b4355bee00","sha1":"2a6eda54d261902e01cd418141c257a19f44a0d4","sha256":"bf8db10107a1cd6f4981aee74961a8112fd80fe87ebccb8324de5234f867f016","sha512":"fd4b7bbe3a8c163ee92e8edd44dfbb837b0a75baf075e3ce6ced663e3c34ad1893157f629d5a6442d0ebb500cf121a88954cfec7541986909b71393008dab0d3","ssdeep":"768:hmtoAunHdcuau1meyV8Eg/Wl4bvExLCa7Z4Lydx:hmtoAun9cuau1IVHQWoETx","tlshash":"a0e24d94bb993444fd8acc37f2a5a7325e63ec4516de02a4cba07b229d334c4db4c4e2","first_seen":"2026-09-22T21:25:27.40987Z","last_seen":"2026-09-22T21:25:27.40987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":764,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"www.bandizip.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}