{"report_id":"d2a65dfc-9305-4c78-884b-4c8b237d3236","version":0,"status":"done","tags":[],"date":"2026-07-28T18:52:34Z","url":{"schema":"http","addr":"itupa.com","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"itupa.com/#/pages/user/login","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"title":"loginPage_login","dom":{"size":301774,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63968), with CRLF, LF line terminators","md5":"66957b4d2696874313ad537b36972c08","sha1":"f3adadf53f3abf65bbb639035180991c1f993ec7","sha256":"1b0711c639660f87b46c268b8c7a8b1ecbc0b0318d17dcd1d0c3e374408f976d","sha512":"28f9cfd0460cbd5a119c956352e84c4482d975351821376eb3f42a5e8575156852f2523463f240dda109120c9bffe16d438bbbe55f6a28407709a642e5b65601","ssdeep":"6144:GZT+33G9XKiUnILNtZEIw9ILmhnWTLv+WuaHUqPv/oCXaYS225GUDn3yeloXYN:c+33GtuENtFEI8nAvMEUqn/NXaYS2w","tlshash":"61546bb6e20e8aca2733cc076b5037511c28f73785641df9f59d282d1bc6b605b987ba","dom_hash":"domhasha678e61aa4df6b3995e279e8ca7995cd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"itupa.com","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T18:52:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.jozogikb.vip","ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2026-05-04T13:25:35.922011Z","last_seen":"2026-07-28T18:29:16.092819Z","alert_count":39,"request_count":13,"received_data":294199,"sent_data":7448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-07-24T08:04:11.091658Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"110.42.233.66","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-24T17:44:02.835081Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"itupa.com","ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-04-19","domain_rank":0,"first_seen":"2026-07-28T18:29:15.421244Z","last_seen":"2026-07-28T18:29:15.421244Z","alert_count":30,"request_count":15,"received_data":1329625,"sent_data":7325,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"itupa.com/static/js/pages-index-index.a13c776c.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad6771644c661466c6ef4c8c2f879556","sha1":"a8feaf5769123a9c635af7a95236001cd69b9b43","sha256":"c7f418280d26845da7d69259f839ebfc2d27fa16d2b0d2a3d7caf16fe6e33681","sha512":"3775506de7c55e3d518f61d10a1f268567f42453e42d2db02b895670ff002b992fb4c93c89119b6d5350229bfe12b7a8d67bfb5fa72e76173f23f4519120315e","ssdeep":"96:TLwzDUbscQfovxDZStL83zT492bB953taz2MBMMUjSB+N8nFvxDZUqqxDxf9yYLK:T0HFfofStC/4G753tari6+KFfUq2jLnK","tlshash":"0922c76f718df50f009358b0112f160a5276ad7aa135a7c8b7f2e172c7a264d2632f5f","size":9978,"data":"","first_seen":"2026-05-04T13:25:43.054517Z","last_seen":"2026-07-28T18:53:04.023035Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-bankCard-bankCard-list~pages-bankCard-bindBankCard~pages-index-index~pages-loan-rePay~pages-lo~d834eb89.2a1416e4.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a880feddedda2f0e5ded4577c76bb71","sha1":"795bbda8aa4961b6f6a25841101a6a260807dc34","sha256":"eedbbdc77bfbce19b3832d3d9ce1fa9be111d4642aa721c94d44f6a506b3824e","sha512":"cc49d182417115e40f02e5fdc863f986e0ee83b0b35754e78f1dc0d8d27486196a622e54dc74692bf6fb89a994ef68efd13330123575b8a27869cac92ba29643","ssdeep":"384:htZLH+sRGN1HevxH3MmM2GZofFGidaUAuNOaipYE8W2o:7ZLH+seRmH3MmM2GZofFGiEOOaipYE8S","tlshash":"5092a62fb28cba1a9783cd50128f661512597a63d47076e4b7e174f0cba7b98311af0f","size":20498,"data":"","first_seen":"2026-05-04T13:25:43.079332Z","last_seen":"2026-07-28T18:53:04.022167Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-user-login.24089368.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"698766a4f47beb618e49cf17efbd654e","sha1":"4c0182140f8676cf8b5c1397cad04d0f3ba71c7e","sha256":"f74e7f9abf7f2441a432c63075fb7b93cd526815ae1523344052df60ecd8210c","sha512":"720edf3f8ab05ad9fe0bf0491b00152f2ae95e85e08db129bfc9cea06adc0821cd4c6bced14aca7a7ed72b78e54ff02f11011e46b50f4054e9d3fd43ace948c5","ssdeep":"384:EbvmyPr9lk4BIG/HPlLxjnCjKcIy0+KO7XtUVoe:ur9lk0IclLh2Iy1YP","tlshash":"5b03e71f7088b54d09a38864012f150682772d7aa52969e9f3f1e5a1cfb7b4d3323f6e","size":40782,"data":"","first_seen":"2026-05-04T13:25:43.052237Z","last_seen":"2026-07-28T18:53:04.012722Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0086722d72ea95d1e97d455d135c91","sha1":"136c72ace1875c1206b274ca0cf24ed33a11d9a6","sha256":"9ea1492b35a3f52f61c72ab9690242149455b8068d149dff181d54532437f552","sha512":"a6377bb19cce90e385c3cd941eaa1ae27e18d70e1ce90f4e2e5cf5a9c5141069539c442aeb8f5c8a13378a8acc1043c1e84bb2a8593ed6ee026e7303e97bad47","ssdeep":"","tlshash":"fce068c360aa294c0120801a304ac0032bba08b29ec149610c487ba58ab9e4bc46e859","size":343,"data":"","first_seen":"2024-11-11T19:54:28.271167Z","last_seen":"2026-07-28T18:53:04.028715Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bc1269fa6b835a0f460cc293b42bd18","sha1":"4705cf3b6c955f7378fb4294d61e00d4a810bff4","sha256":"d71820e8d62c45c3638c7088b06ee756d3c22fee620168157d01ac5cc026b263","sha512":"54dedceb95b4dbe6b912380bec3545750ea3e978019ad4cbcb3f9509aa8cfd3c43db094d8f3cf378c1b5278ac450f0fbd547b2c25ed92aac442e34aa1245348a","ssdeep":"","tlshash":"27e0c65cea18d53b20f232154e0b331a312b618730a0308083e65f41d4d3c4ed91fdda","size":341,"data":"","first_seen":"2026-06-08T22:54:22.350455Z","last_seen":"2026-07-28T18:53:04.029805Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/chunk-vendors.4c54c45d.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ad6e15e1230ea6a40bec802d14f2cbf","sha1":"5dee9bcc7482d7382ae6a71d9014662c8157f1aa","sha256":"ed44faf77c9830b6c15c8957e29f732a795ded5fffc99523cd895fe594f23add","sha512":"bb01b63dd1e4303c6b557862b69f4f78e2ec3b2ee1f009a1fd6ac5f8dfb79c1dfb95b88d6753b97d0e84ad8fd392d5a18e4e928d867cd3205233fdf7e8b55aa7","ssdeep":"6144:gKvhEudpTWGuEs2hXxOHjvG+QzRz53G8XJx:gYHWVlYzhddXJx","tlshash":"40d4189cb295b06507e721b5403f220bb23b6968b40b94d4f37ae4d56d7c98e2267f3c","size":600607,"data":"","first_seen":"2026-05-04T13:25:43.043541Z","last_seen":"2026-07-28T18:53:04.010727Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/index.764226e7.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30be0a71a4e1798ad57c1efb1619baed","sha1":"9c152cb741c1aa8b24ea99d09b33100ed534504c","sha256":"2120d8e614729efd90a5ea4a9d3109f84b230b92b523a595a50d9c00858bcf16","sha512":"367f6c9a5affc4d2ade2c0241dae3d1dc1a0b6db8b61bbb05623fc28e1a46a4cf28c0ee238fca85b3e97455dc67738ea3e87aba8c13aadb7e3dcdaedb0f02aed","ssdeep":"12288:OGABiZX+33GtuENtFEI8nAvMEUqn/NXaNsgqJ:OGEIUsksgqJ","tlshash":"22b48db5b24be5ce23aaf406561fb2426c757d73488cb0d1f35dcc967ec9214ab20b1a","size":515658,"data":"","first_seen":"2026-05-04T13:25:43.045288Z","last_seen":"2026-07-28T18:53:04.016181Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/#/","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec0086722d72ea95d1e97d455d135c91","sha1":"136c72ace1875c1206b274ca0cf24ed33a11d9a6","sha256":"9ea1492b35a3f52f61c72ab9690242149455b8068d149dff181d54532437f552","sha512":"a6377bb19cce90e385c3cd941eaa1ae27e18d70e1ce90f4e2e5cf5a9c5141069539c442aeb8f5c8a13378a8acc1043c1e84bb2a8593ed6ee026e7303e97bad47","ssdeep":"","tlshash":"fce068c360aa294c0120801a304ac0032bba08b29ec149610c487ba58ab9e4bc46e859","size":343,"data":"","first_seen":"2024-11-11T19:54:28.271167Z","last_seen":"2026-07-28T18:53:04.028715Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/#/","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bc1269fa6b835a0f460cc293b42bd18","sha1":"4705cf3b6c955f7378fb4294d61e00d4a810bff4","sha256":"d71820e8d62c45c3638c7088b06ee756d3c22fee620168157d01ac5cc026b263","sha512":"54dedceb95b4dbe6b912380bec3545750ea3e978019ad4cbcb3f9509aa8cfd3c43db094d8f3cf378c1b5278ac450f0fbd547b2c25ed92aac442e34aa1245348a","ssdeep":"","tlshash":"27e0c65cea18d53b20f232154e0b331a312b618730a0308083e65f41d4d3c4ed91fdda","size":341,"data":"","first_seen":"2026-06-08T22:54:22.350455Z","last_seen":"2026-07-28T18:53:04.029805Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-bankCard-bindBankCard~pages-index-index~pages-loan-buy~pages-loan-loan~pages-loan-rePay~pages-~e3fda964.f0bb5eb4.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bcaa90e7d53a0f2dbee159f2b589706","sha1":"7a598d8a851f09c8df3af457ac798e3cac2d57b0","sha256":"7b4584cde8f3b15867a0c5281c910de2cc3a477c879d470884d984ca16c08a56","sha512":"be98ef7aa6cc2f7c3c92518d3d13803d90085db9eadc0e67cb6bb21940bcb625bccf224ec7b554802082e7115327a41b446723d1932ec980e9bd361467a55e11","ssdeep":"192:eQ44+AcfoQGfW4q1I7OwT99VCf5duZ3+JiuiXiwiriFrtllHT+29AI84COcBTJFb:eP4+AXE27XT9ihJ4RPUXL","tlshash":"8fa2730d71d56d631e9398c081ce620283ade5635ce17cc633a29b8acfbf619125f797","size":23037,"data":"","first_seen":"2026-05-04T13:25:43.071472Z","last_seen":"2026-07-28T18:53:04.017607Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[system]初始化域名：https://www.jozogikb.vip","filename":"https://itupa.com/static/js/chunk-vendors.4c54c45d.js","line_number":7,"column_number":79400},{"level":"log","text":"[system]pages/user/login","filename":"https://itupa.com/static/js/chunk-vendors.4c54c45d.js","line_number":7,"column_number":79400},{"level":"log","text":"[system]pages/user/login","filename":"https://itupa.com/static/js/chunk-vendors.4c54c45d.js","line_number":7,"column_number":79400}]},"http":[{"url":{"schema":"https","addr":"itupa.com/favicon.ico","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:09.395Z","timestamp":1785264729395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 1258\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:09 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:18 GMT\r\naccept-ranges: bytes\r\netag: \"69307ab2-4ea\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: GUrN6gSFCjCZzjNcc8Ad2fjraCCBXqNQM6BnVaBiQCRl9j6N8q58cg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1258,"size_decoded":1686,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (932), with CRLF line terminators","md5":"2b47293669a7de136bec01e4849e142c","sha1":"a59da08265e4f36c59269f8a7b760859ea1531e9","sha256":"4d5e462c7fce62c3e93feae54e0b69fcdebfe74ec6bfed76273057bf99aa8f7b","sha512":"fce02ebf3e1701b0d65b35b1fb06de327e99b325daca40980ff73f4e6d1488cac50450fa2ca01741f059861690588c81c982cc468dc5224a44d9ef0af2593d3d","ssdeep":"","tlshash":"1f2195c35c24d01e0560415228abf21d562f41e67850acb069d82fdec8d1fcdcd2fc96","first_seen":"2026-05-04T13:25:43.040018Z","last_seen":"2026-07-28T18:53:04.018569Z","times_seen":5,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/tabs/tabs-f/market.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.969Z","timestamp":1785264725969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/tabs/tabs-f/market.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2611\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-a33\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 0ZT7WDmFcu4jFrCd71f0UAg362vxSVdSXoCeU8MGqVZdh8vopcV0aw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2611,"size_decoded":3039,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit/color RGBA, non-interlaced","md5":"7111f84eded0b3ea2dc4ca9a7c616b7e","sha1":"1ad33b1e551c0ea721ce5b01a24b34d26ae4b3ba","sha256":"e8a3f96249ec55f58f1834b64afaf1177984cdb4d363d5b06fe635d8384cb0e5","sha512":"dfbb1fe04fe1de4ef2aca236e0631aa2c0c853ee5b7e8457e15740ab5879159ad1bb6d4e57bcdf95a8976aec6526a2a67a4bcd9d23fb1d547234f5bdf92bb3c4","ssdeep":"","tlshash":"97513a47c27107b9ebeb833be7040808d945101d4c5689587aa62948ee6b3f82bcd37e","first_seen":"2023-05-04T09:53:33Z","last_seen":"2026-07-28T18:53:04.024612Z","times_seen":29,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/img/kefu.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.930Z","timestamp":1785264727930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/img/kefu.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4448\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-1160\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: SWlhYdwtMon-gVhBSVU7vcbs_59iTNj5pT4NzvksOSWXBN16s7nHXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4448,"size_decoded":4877,"mime_type":"image/png","magic":"PNG image data, 105 x 109, 8-bit/color RGBA, non-interlaced","md5":"fb03453293a0ea4d66f0cf3e21dea0c5","sha1":"18533086f1e0457a62eb75c6a79fa6462acbffec","sha256":"1aad5a92c54388b93944af4196a7c7b218763d61ffbc8b7f2efa8240bed1d7d3","sha512":"b6b8f6a3d713a52a72512554ad312458c5bc93645639632b8b85802571f3f2149064064f86c17a5fd35ebb840ab0c42825b676ce6cbd221ca4de57745016836a","ssdeep":"96:pYR2PmJDvzeLQCroo+4/Ps7gTS0nIf8857sA+KezUEdvdtMw9ETN:S/uVru4/Pyg20nI77vTezjvdCTZ","tlshash":"0f918d56941abd41c489708b60e35c2bbec3ca34a6ebe481cac5dd3c10104b4f3b72d3","first_seen":"2024-08-19T15:18:11.498561Z","last_seen":"2026-07-28T18:53:04.008671Z","times_seen":44,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/siteInfo/getSiteInfo","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.165Z","timestamp":1785264726165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/siteInfo/getSiteInfo HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -3xSDuradt7jdpNb8A_2ELS8p0gBmy8j2CgzXhCTppR38gBG1fpKkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":97,"connect":1,"send":0,"wait":602,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/langMgr/list?lang=en","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.167Z","timestamp":1785264726167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/langMgr/list?lang=en HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dBqkgb_1XJ4OWNsLh-2T1DB78HYMiFn-bdjOLgaL3LiRO0q163vTQQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":95,"connect":2,"send":0,"wait":583,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2225171_8kdcwk4po24.ttf","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:09.714Z","timestamp":1785264729714,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /t/font_2225171_8kdcwk4po24.ttf HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T18:52:02.584Z","timestamp":1785264722584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 1258\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:03 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:18 GMT\r\naccept-ranges: bytes\r\netag: \"69307ab2-4ea\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: gB2EUbXlKn64Hq3iQRvQ4Twoo36WzsBdUzdgbH6CUlqwibyeRVUejg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1258,"size_decoded":1686,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (932), with CRLF line terminators","md5":"2b47293669a7de136bec01e4849e142c","sha1":"a59da08265e4f36c59269f8a7b760859ea1531e9","sha256":"4d5e462c7fce62c3e93feae54e0b69fcdebfe74ec6bfed76273057bf99aa8f7b","sha512":"fce02ebf3e1701b0d65b35b1fb06de327e99b325daca40980ff73f4e6d1488cac50450fa2ca01741f059861690588c81c982cc468dc5224a44d9ef0af2593d3d","ssdeep":"","tlshash":"1f2195c35c24d01e0560415228abf21d562f41e67850acb069d82fdec8d1fcdcd2fc96","first_seen":"2026-05-04T13:25:43.040018Z","last_seen":"2026-07-28T18:53:04.018569Z","times_seen":5,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":0,"dns":84,"connect":8,"send":0,"wait":605,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/chunk-vendors.4c54c45d.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:03.541Z","timestamp":1785264723541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/chunk-vendors.4c54c45d.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 600607\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:03 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-92a1f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: E3ZjC4leVlbMfO0n7kunVyu7pEQH6eWk3fNXYQ80qqTlOcYkIndNHQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":600607,"size_decoded":601052,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65267), with no line terminators","md5":"0ad6e15e1230ea6a40bec802d14f2cbf","sha1":"5dee9bcc7482d7382ae6a71d9014662c8157f1aa","sha256":"ed44faf77c9830b6c15c8957e29f732a795ded5fffc99523cd895fe594f23add","sha512":"bb01b63dd1e4303c6b557862b69f4f78e2ec3b2ee1f009a1fd6ac5f8dfb79c1dfb95b88d6753b97d0e84ad8fd392d5a18e4e928d867cd3205233fdf7e8b55aa7","ssdeep":"6144:gKvhEudpTWGuEs2hXxOHjvG+QzRz53G8XJx:gYHWVlYzhddXJx","tlshash":"40d4189cb295b06507e721b5403f220bb23b6968b40b94d4f37ae4d56d7c98e2267f3c","first_seen":"2026-05-04T13:25:43.043541Z","last_seen":"2026-07-28T18:53:04.010727Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":1631,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/tabs/tabs-f/trade.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.971Z","timestamp":1785264725971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/tabs/tabs-f/trade.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 766\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-2fe\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: wvtmFdSxozkHRev1PsxDeYAuAAIh-Ok-XVFakocgHiEBSCh1uF5XuA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":766,"size_decoded":1193,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"ca55eb778de31b06d7ec55861d5ebcc8","sha1":"ee3f3bbb56b2a0d871f5139c4c41d029d96008ca","sha256":"d4f5d2638a1591e00d3c85783a7f89346d0c856231bdf8515eeba65d9b0d5c14","sha512":"e8583ecdcf6562b367ac1725142ee076927a5e858ff663bb25e034785291296e6df3842a04cebd6181662023d23ceed5e7fba892ca3e554f42484b5a2ddda29d","ssdeep":"","tlshash":"1201ba415331992daeeae660570c1c11c41b07619fd45b9432134f242cd488da27ffb2","first_seen":"2023-10-09T11:55:12Z","last_seen":"2026-07-28T18:53:04.027452Z","times_seen":14,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/switchSet/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.933Z","timestamp":1785264727933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/switchSet/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: bHsaAZ-w6up2kDhHQdhxf89APmSd4-VTaTdaNDRj6OmWA7DUIaBnJg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/switchSet/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.946Z","timestamp":1785264727946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/switchSet/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gPnhSVi7Ub0cpv-QEJOy2xnlOxjliiHk1F41DVX5u42TWrS5aEFDYA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/popUp/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.947Z","timestamp":1785264727947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/popUp/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AIjIBKD37VfJQqh1S3B9CMZ3Voa3C-pYvjpWqNuzyFI4yNNbrng2JQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/tabs/tabs-f/user.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.974Z","timestamp":1785264725974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/tabs/tabs-f/user.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1663\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-67f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: xuGlGYS9gk7cBvWmIFQiD-6gVRnb3vNyXQCgkoj3aDsmKbVzg6fNEw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1663,"size_decoded":2091,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit/color RGBA, non-interlaced","md5":"587b6a1c8e6f1734750ab3404cd98b87","sha1":"103f46253058408cdcfb1b723b25963872f18f3b","sha256":"4849b92fd70888cad93fda975d3fb17601bc47745917fd59a001e5d621685546","sha512":"b246872ad09de24564fa0fd6f88fba1700abd5d49807fe2f50f41b967bd1a556b7b63d08d6f2eacc4ab68005fe1e92d37fdfffab88b38dd530c72fc1835a267a","ssdeep":"","tlshash":"eb311a474d080ecc44ee162238bb9ca3e96ba07a14137c1d8dc15c37ba7a20e4481233","first_seen":"2023-05-04T09:53:33Z","last_seen":"2026-07-28T18:53:04.025446Z","times_seen":29,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"110.42.233.66","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.712Z","timestamp":1785264727712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 29 Jul 2026 15:52:08 GMT\r\ncache-control: max-age=75600\r\nset-cookie: __uni__uid=rBESIWpo+lh4vzB9A3i2Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-29T00:17:37.717592Z","times_seen":18388,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":0,"dns":30,"connect":216,"send":0,"wait":216,"receive":0,"ssl":419},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/appConfig/list?params%5BpagePath%5D=pages/user/login","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:08.519Z","timestamp":1785264728519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/appConfig/list?params%5BpagePath%5D=pages/user/login HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: UE4XsJidD0NCnB8DcUR9hw0VOe6XHa-yKEQ31n8A0t6bmo63Si-y7Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/index.764226e7.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:03.545Z","timestamp":1785264723545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/index.764226e7.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 515658\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:03 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-7de4a\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: _LSFloRIJntB0u3yBT_pgkfZ56ykOef9vHH6nZwclRrlKXPEnwsQLA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":515658,"size_decoded":516103,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65338), with no line terminators","md5":"30be0a71a4e1798ad57c1efb1619baed","sha1":"9c152cb741c1aa8b24ea99d09b33100ed534504c","sha256":"2120d8e614729efd90a5ea4a9d3109f84b230b92b523a595a50d9c00858bcf16","sha512":"367f6c9a5affc4d2ade2c0241dae3d1dc1a0b6db8b61bbb05623fc28e1a46a4cf28c0ee238fca85b3e97455dc67738ea3e87aba8c13aadb7e3dcdaedb0f02aed","ssdeep":"12288:OGABiZX+33GtuENtFEI8nAvMEUqn/NXaNsgqJ:OGEIUsksgqJ","tlshash":"22b48db5b24be5ce23aaf406561fb2426c757d73488cb0d1f35dcc967ec9214ab20b1a","first_seen":"2026-05-04T13:25:43.045288Z","last_seen":"2026-07-28T18:53:04.016181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":1693,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-index-index.a13c776c.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.949Z","timestamp":1785264725949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/pages-index-index.a13c776c.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 9978\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-26fa\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: U3FwB8pvcWjqpzmMj-mSaDzvPG6-h94QjsNTcOksHyzO_1ihK9rPHQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9978,"size_decoded":10420,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9622), with no line terminators","md5":"ad6771644c661466c6ef4c8c2f879556","sha1":"a8feaf5769123a9c635af7a95236001cd69b9b43","sha256":"c7f418280d26845da7d69259f839ebfc2d27fa16d2b0d2a3d7caf16fe6e33681","sha512":"3775506de7c55e3d518f61d10a1f268567f42453e42d2db02b895670ff002b992fb4c93c89119b6d5350229bfe12b7a8d67bfb5fa72e76173f23f4519120315e","ssdeep":"96:TLwzDUbscQfovxDZStL83zT492bB953taz2MBMMUjSB+N8nFvxDZUqqxDxf9yYLK:T0HFfofStC/4G753tari6+KFfUq2jLnK","tlshash":"0922c76f718df50f009358b0112f160a5276ad7aa135a7c8b7f2e172c7a264d2632f5f","first_seen":"2026-05-04T13:25:43.054517Z","last_seen":"2026-07-28T18:53:04.023035Z","times_seen":5,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/textLang/list?pageNum=1\u0026pageSize=30","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.165Z","timestamp":1785264726165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/textLang/list?pageNum=1\u0026pageSize=30 HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AWnUOlpU9oNzQiHwv4Rvbva9jpkak3KUX1KY4neR7b3x4lzjrllrmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":96,"connect":1,"send":0,"wait":570,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/orderFeeSetting/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.166Z","timestamp":1785264726166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/orderFeeSetting/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LkWUcLKGhrVTm_89g6mZklbjcWpglHArCO6a5_WEmIl9FRZr8DJj3Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":96,"connect":2,"send":0,"wait":550,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/siteInfo/getSiteInfo","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.945Z","timestamp":1785264727945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/siteInfo/getSiteInfo HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: RDUZMWvqOsrIukPL2U4yolojnDJihQD3obis-MN_26cBMbm_fHTMEQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/profile/upload/banner/2025/09/04/logo_20250904164544A001.png","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:09.690Z","timestamp":1785264729690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"GET /profile/upload/banner/2025/09/04/logo_20250904164544A001.png HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 285692\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:09 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 04 Sep 2025 20:45:44 GMT\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _cAZunDWVTNY3INDWiq7v6uBxKU0zzMoyvGg9Ags0KPB79woOTm9aA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":285692,"size_decoded":286243,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"5ec15363ebef979c630cadd048713acf","sha1":"2f2f6d65963c04be08e8bb44b1b6a0dca3669414","sha256":"6de406841ca42d52705e6d851b4809cc351a758c10b8f0d12ade0b453c0fd7a7","sha512":"688cac046ab581da9b137bbaf8b9492b6a87a318bd3dcaa91ed5b038d25f29b15744ee7167a3e798e097d38e5db88532f66487b2ea99f363d66dfca0ae073cb1","ssdeep":"6144:FXk7bF6CnEiCPfqkjh6zBDGCXvETMP12D9dfPQEPTxMIwl:F07bF6Fi0EBJcnfTOl","tlshash":"f054129dc6c7c3460cca0174c28bad936f7fa74b86e5aaba3505545c3fa28b4f46061f","first_seen":"2026-05-04T13:25:43.06725Z","last_seen":"2026-07-28T18:53:04.021328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":1375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/tabs/tabs-f/wallet.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.973Z","timestamp":1785264725973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/tabs/tabs-f/wallet.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1368\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-558\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: mU6lMwhDGTXs55K5Q5VER5Kjs327FZShRd_5fk8rpetDyTpNX2WUng==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1368,"size_decoded":1796,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit colormap, non-interlaced","md5":"b7d1ed286ef7dd75235d11960ea94094","sha1":"45a5a2c2eea7315ff1f48656dfe0a904383798f3","sha256":"3b4efde762d54f9ae461a20ca983e8a53db301efb7efec686792791066c845c9","sha512":"561254d5e93e984b40a462e8bc7932a1e1120075ad5587e254e1cdc9b6da7ad28c76732a834f13271fb104ddee215c3c1a77d67c885808e2deed3e7a3173eea5","ssdeep":"","tlshash":"a2212672378eb9c45f31b62d5318f1d2d29389b91b21f9a768c98b26b00096559adb02","first_seen":"2023-05-04T09:53:33Z","last_seen":"2026-07-28T18:53:04.02383Z","times_seen":28,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-user-login.24089368.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.788Z","timestamp":1785264726788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/pages-user-login.24089368.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 40782\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:07 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-9f4e\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: moLPTNS2wZ_C9NNdZ-3lCxjGl7_yVKlOnCRN47jdwFcJASIwbOfv8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40782,"size_decoded":41225,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39634), with no line terminators","md5":"698766a4f47beb618e49cf17efbd654e","sha1":"4c0182140f8676cf8b5c1397cad04d0f3ba71c7e","sha256":"f74e7f9abf7f2441a432c63075fb7b93cd526815ae1523344052df60ecd8210c","sha512":"720edf3f8ab05ad9fe0bf0491b00152f2ae95e85e08db129bfc9cea06adc0821cd4c6bced14aca7a7ed72b78e54ff02f11011e46b50f4054e9d3fd43ace948c5","ssdeep":"384:EbvmyPr9lk4BIG/HPlLxjnCjKcIy0+KO7XtUVoe:ur9lk0IclLh2Iy1YP","tlshash":"5b03e71f7088b54d09a38864012f150682772d7aa52969e9f3f1e5a1cfb7b4d3323f6e","first_seen":"2026-05-04T13:25:43.052237Z","last_seen":"2026-07-28T18:53:04.012722Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":563,"receive":550,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/textLang/list?pageNum=1\u0026pageSize=30","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.948Z","timestamp":1785264727948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/textLang/list?pageNum=1\u0026pageSize=30 HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OXGOHX0B3rMWT4PkwOv-PE7Yt-om2XV-5RdRu8ZpuT4cwoGmrzAYWw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-bankCard-bindBankCard~pages-index-index~pages-loan-buy~pages-loan-loan~pages-loan-rePay~pages-~e3fda964.f0bb5eb4.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.944Z","timestamp":1785264725944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/pages-bankCard-bindBankCard~pages-index-index~pages-loan-buy~pages-loan-loan~pages-loan-rePay~pages-~e3fda964.f0bb5eb4.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 23037\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-59fd\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 9ayx-gp59t7qwBie3xy8kblpQU4kKVo7g1TOWsvKiu_O0sb2_vT4Xg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":23037,"size_decoded":23480,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22125), with no line terminators","md5":"4bcaa90e7d53a0f2dbee159f2b589706","sha1":"7a598d8a851f09c8df3af457ac798e3cac2d57b0","sha256":"7b4584cde8f3b15867a0c5281c910de2cc3a477c879d470884d984ca16c08a56","sha512":"be98ef7aa6cc2f7c3c92518d3d13803d90085db9eadc0e67cb6bb21940bcb625bccf224ec7b554802082e7115327a41b446723d1932ec980e9bd361467a55e11","ssdeep":"192:eQ44+AcfoQGfW4q1I7OwT99VCf5duZ3+JiuiXiwiriFrtllHT+29AI84COcBTJFb:eP4+AXE27XT9ihJ4RPUXL","tlshash":"8fa2730d71d56d631e9398c081ce620283ade5635ce17cc633a29b8acfbf619125f797","first_seen":"2026-05-04T13:25:43.071472Z","last_seen":"2026-07-28T18:53:04.017607Z","times_seen":5,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/tabs/tabs-f/home-a.png","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.967Z","timestamp":1785264725967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/tabs/tabs-f/home-a.png HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4363\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:14 GMT\r\naccept-ranges: bytes\r\netag: \"69307aae-110b\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: v-PJchoOG2iuUeRPjA80zreUwiAPOeWTu7WNyTYu6O-_CR-_uvFsxQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4363,"size_decoded":4792,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit/color RGBA, non-interlaced","md5":"6519b08ffb830e5e0e027d7c91fb4dae","sha1":"b398320d36b04db10e573fb18cb72240f5e1a7d1","sha256":"c8331a8559b6f16ddca760f79ac5116462b0932954854746baa7d0ffd58cbe86","sha512":"ef469d8bd18e93a352d9ad9093d91d791a4d80e43ca1150449511aadfe87f6eb05ab60b722e6fcd76882f721fc97b0256349e9a0b2ed2303031bbcb5becbe0f1","ssdeep":"96:P8exwoo8HqTsOXXKadTa8atoUWIocxcvwXRDkUR/L+uqlTN9Og503Rd:PtOodUsAXKn8aYIocioBDkUR/iHhNQOi","tlshash":"1a918f51617d514aaccc8fec9b3918c8bde404e70cfcd5c2193309ab9e4d55c0834729","first_seen":"2023-05-04T09:53:33Z","last_seen":"2026-07-28T18:53:04.026242Z","times_seen":29,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/platformCurrency/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:06.168Z","timestamp":1785264726168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/platformCurrency/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dDvqU80xL_uM_Ah6fo13sVbR3UG8Wl5Ng1ID3vVEuZxyCLoHW2tUww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":94,"connect":2,"send":0,"wait":552,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jozogikb.vip/api/otherValue/list","fqdn":"www.jozogikb.vip","domain":"jozogikb.vip","tld":"vip"},"ip":{"addr":"52.84.50.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:07.942Z","timestamp":1785264727942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jozogikb.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:25:A9:92:5B:BC:22:DC:78:FA:09:09:28:63:32:3E:9A:7B:61:8D","sha256":"EE:7A:B6:6A:C4:58:C4:C0:EA:8F:34:96:B8:77:39:87:E3:48:8F:6A:33:26:6D:7D:75:1C:91:37:9B:C9:2E:6B"}}},"request":{"raw":"OPTIONS /api/otherValue/list HTTP/1.1\r\nHost: www.jozogikb.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,languageid\r\nReferer: https://itupa.com/\r\nOrigin: https://itupa.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:08 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://itupa.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, languageid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: kxm9lUyGsIC7yj3MdRlDnXsCNAtqDOgngbOKxnPOPQuFY524V_2WLQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-29T00:56:21.327145Z","times_seen":17589593,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"www.jozogikb.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/index.f37b29dd.css","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:03.540Z","timestamp":1785264723540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/index.f37b29dd.css HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 94814\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:03 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-1725e\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: S8Rofgb8ygRROboghF0MBD9zVxcUOjjoiYmYmN0zyrm0-Wn_wpOrdg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":94814,"size_decoded":95244,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24cc70f8c15a45627e86ddd901c2dac5","sha1":"71cf8a0d5a8d6b1cecfa5e746c57493c4d15a150","sha256":"479cdc0fac89745e61f8845a9a29fb28917810c258e732ace1e79a81a239d189","sha512":"5575c0019b564705db66e177f4199f923dca79ac20ce15159ddaa1298c2fc8677b80555e67d0362c163755a4a6e693d288cfbae6be3740ecc102f7170cdba24e","ssdeep":"1536:7lIUpuK7hmVmz2VuUH3xdynf7yQgnMhlNbc:WUpuK7hmVxuUH3im/nMPa","tlshash":"ed93083719012e3ae52bcd16b6c0ab5a1e61c133e15307adfbb876188bcf9c9167b345","first_seen":"2023-04-12T23:21:24Z","last_seen":"2026-07-28T18:53:04.019523Z","times_seen":299,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itupa.com/static/js/pages-bankCard-bankCard-list~pages-bankCard-bindBankCard~pages-index-index~pages-loan-rePay~pages-lo~d834eb89.2a1416e4.js","fqdn":"itupa.com","domain":"itupa.com","tld":"com"},"ip":{"addr":"143.204.238.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itupa.com/","date":"2026-07-28T18:52:05.947Z","timestamp":1785264725947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itupa.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:FA:FF:CC:00:97:36:86:37:83:FA:EB:C6:D7:B1:0F:CD:23:4C:F1","sha256":"1E:32:AA:33:4A:46:A3:D0:63:53:92:28:32:79:6A:96:20:53:BC:56:33:F9:47:CC:FC:E8:43:14:3D:A5:26:C0"}}},"request":{"raw":"GET /static/js/pages-bankCard-bankCard-list~pages-bankCard-bindBankCard~pages-index-index~pages-loan-rePay~pages-lo~d834eb89.2a1416e4.js HTTP/1.1\r\nHost: itupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://itupa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 20498\r\nserver: nginx/1.20.2\r\ndate: Tue, 28 Jul 2026 18:52:06 GMT\r\nlast-modified: Wed, 03 Dec 2025 18:00:12 GMT\r\naccept-ranges: bytes\r\netag: \"69307aac-5012\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3d622fd2dbfa16c86afe2660e869a6d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: WEZlpbFL43JDPihAUOemfIaPe7ItVws_POpc0LqW_pmNeUnRl8pn0Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20498,"size_decoded":20941,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20142), with no line terminators","md5":"9a880feddedda2f0e5ded4577c76bb71","sha1":"795bbda8aa4961b6f6a25841101a6a260807dc34","sha256":"eedbbdc77bfbce19b3832d3d9ce1fa9be111d4642aa721c94d44f6a506b3824e","sha512":"cc49d182417115e40f02e5fdc863f986e0ee83b0b35754e78f1dc0d8d27486196a622e54dc74692bf6fb89a994ef68efd13330123575b8a27869cac92ba29643","ssdeep":"384:htZLH+sRGN1HevxH3MmM2GZofFGidaUAuNOaipYE8W2o:7ZLH+seRmH3MmM2GZofFGiEOOaipYE8S","tlshash":"5092a62fb28cba1a9783cd50128f661512597a63d47076e4b7e174f0cba7b98311af0f","first_seen":"2026-05-04T13:25:43.079332Z","last_seen":"2026-07-28T18:53:04.022167Z","times_seen":5,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-28","alert":"Phishing Block","trigger":"itupa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"itupa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}