{"report_id":"d8a30f1e-458e-450e-870a-256dd2fcb080","version":6,"status":"done","tags":[],"date":"2026-03-30T14:33:02Z","url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":0,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"title":"楽天e-NAVI","dom":{"size":18628,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15390)","md5":"6c8e2571913a7d4254003063724725d5","sha1":"6f7ec941136901d702c50b8e509f14680de28de7","sha256":"07cd249a14112e899ecaec908c9a0ef8f67153b9ca04c97041d0936fb566ae20","sha512":"0fe87b6c223ba012112d6601f076bcb36662b03e3b3062706d8399a8ded88d3fee7dcca3fe8367f8292ccbc9a07368565f76103f6feb58200e6772f2461723a9","ssdeep":"192:S8lVbqdu4lbmWvLgevkVsD0q1SOfj9x4+H3bk4W764JnJ+J/Xsz+mX:S8lVbqdu4lbmWvLgQysOOfZx/+m8DX","tlshash":"67824328a100547a6137c7dca0757f09756bf3abc0498a50a5bd62e06fc3df8e49b879","dom_hash":"domhash22af7db6be595e21748d8afb7c5aab21","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":0,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T14:33:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sewo2.top","ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"domain_registered":"2025-04-12","domain_rank":0,"first_seen":"2026-03-30T14:33:02.965128Z","last_seen":"2026-03-30T14:33:02.965128Z","alert_count":60,"request_count":30,"received_data":650376,"sent_data":14308,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BZYLER7b.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"224e207ebc3abed5b9b401dde47e300a","sha1":"63aa1fb7e8b563064be293e45652bae1e0c687d2","sha256":"1a1907a5e82762e8bb99be7d0d0362dd9a971f0787423ca8ddde4094795ee800","sha512":"b6673ddca8bf7e27d57aca5247b2487536181b575301876118b7579e10631b03fbd2557f599077adc3ee5aa7b49c5d80fe8da7cad5e0450f06c42728f5ad09c5","ssdeep":"","tlshash":"2f01467c7d48913c905f21f4561a21466b3e5fd937d50c70649c886c9517c7cf79fa24","size":842,"data":"","first_seen":"2026-01-14T03:52:29.401162Z","last_seen":"2026-04-26T07:06:42.537059Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/D4oXZ1Dm.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cfccc30f39badc847e261d86ec1f49f","sha1":"f4a455ca543c0d4d34cc57045971795f11871107","sha256":"0058e1fabb1e03c317b6d3509d2bd98f0ced8833a96d7a015672c9cafca3990c","sha512":"b19c93ba07ca576a63c621f07721d33698827141a132a71d4fd7ad5649ee9f9f938117549dc98fe413c150a77f5d81fa269c22cef667892f5b7412ff22ac94ce","ssdeep":"6144:g5TLZcJbzQ08VVNrSDDQcj6JPdEmkHrW8maaLtl:g5TLZcJHQ0yVNrSDbj6JPqFmaaLtl","tlshash":"5d3439c97296b06253b328f1017f100bf23a2a6a3849d498f19dd9ca3d79589c17bf7d","size":242028,"data":"","first_seen":"2025-11-13T03:55:26.121599Z","last_seen":"2026-06-21T14:15:27.126789Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/B1mJW4nA.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2f1e8abb054423152c75d2abf5940c3","sha1":"a0ffe897c0ae0f0f150853f559069d1f733b3238","sha256":"7de3ca0c09d229344ed792cfe80f2e44c9bee56eaaa83c2b9509c96b8f8b6f68","sha512":"c66506da653df2ad3c718f63f3f351801d23608b5a4dfc05dfbd610b5ba67d4d0b7a7d69853b07785a00d4ef9fea4fb6d51a0062b5d0192d1a0200189dc9f230","ssdeep":"768:YzJENSox0h6wlGVpUQJfFJCy+K7WE+0cGzksqfz1BcUDxnvwTM95JhKS6DSBiU28:HzPQ9cEXMA","tlshash":"1503fac8b261546683e2a1a384750203f33999157408865cbb2ceef7ad7eeca7173f75","size":41394,"data":"","first_seen":"2025-06-24T22:10:16.163277Z","last_seen":"2026-07-12T22:39:11.977554Z","times_seen":19796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-22T21:30:22.568098Z","times_seen":235674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/CyXnbF32.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9a937dd89623aca8c82d670a9e0ccf32","sha1":"5751970466a6c82820a28906aa494e6f7523463c","sha256":"f2e78a866b3d1eb96139f1aa36dcacdf5f7b6fa8d800f52de598b764df1ec3d8","sha512":"9c7d51b11663c5c522d4fb14e66f120c932355be494313ce84fe0ed5bebe1cce38b5f8aec6332c80fc00a148a4c1127177b6228673a52f8d0c142e2b67d4dea5","ssdeep":"384:/mKyLbS1qvEG6hB1Ah4R4mGn6BhWDXBBpHRyuPxGTs1GhEsF89wpLLUIZ3ojv9Pq:/mVgqvEG6hvGn6L09RyuPxGTsY2wpZWI","tlshash":"daa2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","size":22916,"data":"","first_seen":"2026-01-14T03:52:29.416425Z","last_seen":"2026-04-26T07:06:42.530993Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BVgA2WaO.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b85f636e7ba0169a5ab357ff7bbaa3a4","sha1":"446fb88bfa2bfe8c9651d3d56208e6977174423e","sha256":"428f81a30d31e031668ae909ad43a10478c47b995b0163da1010fffa46b0f01b","sha512":"26f424bb59797b9d34614243cce23ce73e3d98b3f8f026477b970cc39a0b3f7c2883854019ef0db8591bcf7f4c8fe136d925566a565989fc0e6e6d62c5c1bf87","ssdeep":"384:iNWyxUgexKRgVHhTPiQ7zlZpxphuxpPHIX1mql1ZkrpnfYFaKjPl6g:iNWyaOMiKzvphCN+1mrBfYFBjNP","tlshash":"71d25bec72a086f9912bc1e5985e2000f03daf76e49640b1f2bdc9702996dc97b91f75","size":28400,"data":"","first_seen":"2026-01-14T03:52:29.403554Z","last_seen":"2026-04-26T07:06:42.536153Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-22T21:25:34.127764Z","times_seen":730830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-22T21:30:22.568098Z","times_seen":235674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-22T21:25:34.127764Z","times_seen":730830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-22T21:25:34.127764Z","times_seen":730830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/HUrAbw0B.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","size":82,"data":"","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/DRjFm3NY.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3c5ddccbaf25a166f792b42ee0a6283","sha1":"c9c7d69ca450d47f20298b028ce9e80201e147fa","sha256":"0ee374cd0e199a88b201b19d6c3c8fd1c7820a7784235aba2a1ab01090e8a84f","sha512":"a281362a511262975ee73239c90c2695fd63efe23ed06f9d764661ca9c2632cc003e0ab40d0b1ff00674bf09b0f7b5db960fdfe71a4c1ab855f447ca33bc6797","ssdeep":"384:5sKWO9sEcBh0s8AxNBTxFfkhgiSHv0BwlrRiGj+TGGZHcqa:5sZ3Bxx3xFaFMsBwlrRiGj+TGGx6","tlshash":"f582d82cc200c17df07f82ad21d93554b16d6be5d15249abe6fccdb06e06e78d61eb28","size":18407,"data":"","first_seen":"2026-01-14T03:52:29.375559Z","last_seen":"2026-04-26T07:06:42.53488Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-22T21:30:22.568098Z","times_seen":235674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/XANOhsXG.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"684bb65a99c3844da2ce930d1fea03f3","sha1":"1307d1ac91b17502e88586301289219de611f85f","sha256":"1b30d6389cd0994375b026cca3f3a24d14ab3869a4e7163eec910545e75c51a2","sha512":"23febde299ed6657d43eb792ff6b0bc785896875d19da04fab9a1990788855fea86415ddb1be0e4ad8ace7e48b92fdc9a0a0582b42e2957486bf08b33efa94f0","ssdeep":"","tlshash":"f12132c613153234454f0bee5fab790a402e63ec9a2c06d0a85807a2f347bd7f85de00","size":1207,"data":"","first_seen":"2026-01-14T03:52:29.390879Z","last_seen":"2026-04-26T07:06:42.53915Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/Dw3qHFpU.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","size":84,"data":"","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sewo2.top/jp/","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T14:32:39.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/ HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-7a0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c92c99bd51ee36f1dc70dfb7e51e9746","sha1":"e34b821813e5ab214577eb7b9c7873f52b4d1314","sha256":"707254c228746ccd439c0a4842bbf4e38c61a75447d0129aa37c9b3b8ddcd5e6","sha512":"008a900cd0f20244077188ffc6364f467ddd884a1e67a799d4caf29c9c5c579553d9975ac0aa416db5f36e924a1c760538aea994618a463cf2f5bca5902b83cd","ssdeep":"","tlshash":"8d41ce53f0105c1ae3368766add2f10946b2f7298a586dc0a1ad707e5cd2fd385d366c","first_seen":"2025-11-13T03:55:26.124794Z","last_seen":"2026-06-21T14:15:27.126211Z","times_seen":113,"resource_available":true,"data":null}},"time_used":974,"timings":{"blocked":410,"dns":88,"connect":151,"send":0,"wait":151,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/9nyrgnj02f7.png","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:41.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /9nyrgnj02f7.png HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-07-19T08:02:19.925265Z","times_seen":4069,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BVgA2WaO.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/BVgA2WaO.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-6ef0\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28400,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27143)","md5":"b85f636e7ba0169a5ab357ff7bbaa3a4","sha1":"446fb88bfa2bfe8c9651d3d56208e6977174423e","sha256":"428f81a30d31e031668ae909ad43a10478c47b995b0163da1010fffa46b0f01b","sha512":"26f424bb59797b9d34614243cce23ce73e3d98b3f8f026477b970cc39a0b3f7c2883854019ef0db8591bcf7f4c8fe136d925566a565989fc0e6e6d62c5c1bf87","ssdeep":"384:iNWyxUgexKRgVHhTPiQ7zlZpxphuxpPHIX1mql1ZkrpnfYFaKjPl6g:iNWyaOMiKzvphCN+1mrBfYFBjNP","tlshash":"71d25bec72a086f9912bc1e5985e2000f03daf76e49640b1f2bdc9702996dc97b91f75","first_seen":"2026-01-14T03:52:29.403554Z","last_seen":"2026-04-26T07:06:42.536153Z","times_seen":24,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/CyXnbF32.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/CyXnbF32.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-5984\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22916,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22915)","md5":"9a937dd89623aca8c82d670a9e0ccf32","sha1":"5751970466a6c82820a28906aa494e6f7523463c","sha256":"f2e78a866b3d1eb96139f1aa36dcacdf5f7b6fa8d800f52de598b764df1ec3d8","sha512":"9c7d51b11663c5c522d4fb14e66f120c932355be494313ce84fe0ed5bebe1cce38b5f8aec6332c80fc00a148a4c1127177b6228673a52f8d0c142e2b67d4dea5","ssdeep":"384:/mKyLbS1qvEG6hB1Ah4R4mGn6BhWDXBBpHRyuPxGTs1GhEsF89wpLLUIZ3ojv9Pq:/mVgqvEG6hvGn6L09RyuPxGTsY2wpZWI","tlshash":"daa2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","first_seen":"2026-01-14T03:52:29.416425Z","last_seen":"2026-04-26T07:06:42.530993Z","times_seen":24,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BZYLER7b.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/BZYLER7b.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/BVgA2WaO.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-34a\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (841)","md5":"224e207ebc3abed5b9b401dde47e300a","sha1":"63aa1fb7e8b563064be293e45652bae1e0c687d2","sha256":"1a1907a5e82762e8bb99be7d0d0362dd9a971f0787423ca8ddde4094795ee800","sha512":"b6673ddca8bf7e27d57aca5247b2487536181b575301876118b7579e10631b03fbd2557f599077adc3ee5aa7b49c5d80fe8da7cad5e0450f06c42728f5ad09c5","ssdeep":"","tlshash":"2f01467c7d48913c905f21f4561a21466b3e5fd937d50c70649c886c9517c7cf79fa24","first_seen":"2026-01-14T03:52:29.401162Z","last_seen":"2026-04-26T07:06:42.537059Z","times_seen":24,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/favicon.ico","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:41.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-07-19T08:02:19.925265Z","times_seen":4069,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/css/Cb2TTb0D.css","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/css/Cb2TTb0D.css HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-2f3f\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12095,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10665)","md5":"eebc8c7b5bcb52a4a8e482f06285dd1d","sha1":"0c0db82c5da4608ccb46a75aceb4f8915933d7b3","sha256":"388c2386a9fab606e655292e4e93279a8e77e1d910ab521a2edcb9591f7fe030","sha512":"e859f788ff31e319bb1046978e44320a9642710e0158f6978ea7d563800170a28adfa09f7ba0b056e730fdce5941bf13ef7f77e91d1dd2339710c7e33a31eb58","ssdeep":"192:D6r+ZYDBc7Ha1D+fNrF5VlJH8TsFc6lsr11w8Y5KWKk:D6yf7++fNrF5N8AFc6ls51HW9","tlshash":"7642ca127a0c9e14b037c311a5635b091939b3f3ad52ee79bd50b960ca4b2fc359f268","first_seen":"2026-01-14T03:52:29.405767Z","last_seen":"2026-04-26T07:06:42.543719Z","times_seen":24,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/DRjFm3NY.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/DRjFm3NY.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-47e7\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18407,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17907)","md5":"e3c5ddccbaf25a166f792b42ee0a6283","sha1":"c9c7d69ca450d47f20298b028ce9e80201e147fa","sha256":"0ee374cd0e199a88b201b19d6c3c8fd1c7820a7784235aba2a1ab01090e8a84f","sha512":"a281362a511262975ee73239c90c2695fd63efe23ed06f9d764661ca9c2632cc003e0ab40d0b1ff00674bf09b0f7b5db960fdfe71a4c1ab855f447ca33bc6797","ssdeep":"384:5sKWO9sEcBh0s8AxNBTxFfkhgiSHv0BwlrRiGj+TGGZHcqa:5sZ3Bxx3xFaFMsBwlrRiGj+TGGx6","tlshash":"f582d82cc200c17df07f82ad21d93554b16d6be5d15249abe6fccdb06e06e78d61eb28","first_seen":"2026-01-14T03:52:29.375559Z","last_seen":"2026-04-26T07:06:42.53488Z","times_seen":24,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":335,"dns":4,"connect":153,"send":0,"wait":153,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BZYLER7b.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/BZYLER7b.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-34a\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":842,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (841)","md5":"224e207ebc3abed5b9b401dde47e300a","sha1":"63aa1fb7e8b563064be293e45652bae1e0c687d2","sha256":"1a1907a5e82762e8bb99be7d0d0362dd9a971f0787423ca8ddde4094795ee800","sha512":"b6673ddca8bf7e27d57aca5247b2487536181b575301876118b7579e10631b03fbd2557f599077adc3ee5aa7b49c5d80fe8da7cad5e0450f06c42728f5ad09c5","ssdeep":"","tlshash":"2f01467c7d48913c905f21f4561a21466b3e5fd937d50c70649c886c9517c7cf79fa24","first_seen":"2026-01-14T03:52:29.401162Z","last_seen":"2026-04-26T07:06:42.537059Z","times_seen":24,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":470,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/open/?apiName=CmQdCYkBuf1o2O6FJBGVCW81CxSu8KKY3dQFyAOiGK19U0A4OLtF4rgw3mKs5%2FqH\u0026uuid=c711c534-fa56-4aa0-95bc-986fbcf546ce","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /open/?apiName=CmQdCYkBuf1o2O6FJBGVCW81CxSu8KKY3dQFyAOiGK19U0A4OLtF4rgw3mKs5%2FqH\u0026uuid=c711c534-fa56-4aa0-95bc-986fbcf546ce HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 30 Mar 2027 20:32:44 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b31d2e449dea837b0a1667e0cc568ccd","sha1":"f2a9342124b0738dba571aa4a25f816d62f58a18","sha256":"8eb434031c800898502e49fa1b85131f3ab143b27d0cfceff7c7f05026f5a823","sha512":"a7b60b301b8da23327accbca029866cf274f76c8b566b5c7ecc52427e3d1739b95d71c69a04c37b7d8f689ba47e21898538df2cf04f9d5370c8c07ca4cc37c7b","ssdeep":"","tlshash":"0da0024116085ca8de527481390e1568afe53245f5441515999c553c8f05828e1a6924","first_seen":"2025-04-09T12:11:12.713224Z","last_seen":"2026-07-13T18:09:18.180467Z","times_seen":249,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":1,"connect":148,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/Dw3qHFpU.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/Dw3qHFpU.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/DRjFm3NY.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-54\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/css/CtOXUomA.css","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:40.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/css/CtOXUomA.css HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-5340\"\r\nExpires: Wed, 29 Apr 2026 14:32:40 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19882)","md5":"b1ddf52d557fdf617993dfc615e39d81","sha1":"0d1dd918ad73b546c4967c56b926be8f925e154a","sha256":"79b170a24c85f33dce02ff1de38fbf618ca17fa1be3c70d8505d3abb37afae11","sha512":"dbb3069dff65b7ec4559bda1bb40c54b6d4e14a933d20fc3c774afb5c9807daa84017bd5200f91df23a220bf81f19c36b2b4140596b5beff62c68e816818d6d2","ssdeep":"192:4xwOW9JyW9JyZ8L9WsfGqqphofimMY22/r7cz1w/HZNU+E8Lb3IWL:qw59Yqcofwzw/HZNU2L","tlshash":"11a2152e6e10017a7c57c0f6f5e5eb89b22571c1ef2aa7fefd422500d7c63a61c92618","first_seen":"2025-11-13T03:55:26.125657Z","last_seen":"2026-06-21T14:15:27.128002Z","times_seen":113,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":313,"dns":1,"connect":150,"send":0,"wait":153,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/XANOhsXG.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/XANOhsXG.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/BVgA2WaO.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-4b7\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1206)","md5":"684bb65a99c3844da2ce930d1fea03f3","sha1":"1307d1ac91b17502e88586301289219de611f85f","sha256":"1b30d6389cd0994375b026cca3f3a24d14ab3869a4e7163eec910545e75c51a2","sha512":"23febde299ed6657d43eb792ff6b0bc785896875d19da04fab9a1990788855fea86415ddb1be0e4ad8ace7e48b92fdc9a0a0582b42e2957486bf08b33efa94f0","ssdeep":"","tlshash":"f12132c613153234454f0bee5fab790a402e63ec9a2c06d0a85807a2f347bd7f85de00","first_seen":"2026-01-14T03:52:29.390879Z","last_seen":"2026-04-26T07:06:42.53915Z","times_seen":24,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/css/CjTWZ6rg.css","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/css/CjTWZ6rg.css HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-5e9\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74e50252d9f17d170424dd3e9db2c693","sha1":"c886b6de322c6346f0212d332f777d237ae6d684","sha256":"bf67a0ea60185349456cbdb5b64e1b6dc020ef335f882b9942891f5d17a4af24","sha512":"9ac1e82f3631bb562af2cc73d51078e8373b27278c81bb487af03752021b45f2a6256021f123857662df7ce4d5ae659854314777b4f5d8447543894eae1b305c","ssdeep":"","tlshash":"6d3129931840d768f98bd9223af2c35321798817bdaa36ff5d41bc14e35f309aa8a301","first_seen":"2026-01-14T03:52:29.407994Z","last_seen":"2026-04-26T07:06:42.532907Z","times_seen":24,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/XANOhsXG.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/XANOhsXG.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-4b7\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1206)","md5":"684bb65a99c3844da2ce930d1fea03f3","sha1":"1307d1ac91b17502e88586301289219de611f85f","sha256":"1b30d6389cd0994375b026cca3f3a24d14ab3869a4e7163eec910545e75c51a2","sha512":"23febde299ed6657d43eb792ff6b0bc785896875d19da04fab9a1990788855fea86415ddb1be0e4ad8ace7e48b92fdc9a0a0582b42e2957486bf08b33efa94f0","ssdeep":"","tlshash":"f12132c613153234454f0bee5fab790a402e63ec9a2c06d0a85807a2f347bd7f85de00","first_seen":"2026-01-14T03:52:29.390879Z","last_seen":"2026-04-26T07:06:42.53915Z","times_seen":24,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":283,"dns":1,"connect":152,"send":0,"wait":153,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/login_bg.png","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/login_bg.png HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/css/Cb2TTb0D.css\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 168838\r\nLast-Modified: Sun, 02 Nov 2025 11:47:28 GMT\r\nConnection: keep-alive\r\nETag: \"690744d0-29386\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"17dfd5a87f5f086ec24fae2c8ed18536","sha1":"9be903ac49909bfe28bdf394cc4f56eace951b4b","sha256":"fc771caa3d3acd497a986e47b49ea37d54524c1d840e3a70ca16e9e32247213c","sha512":"0724b3f098a57f297f94e1bd8d3b56f4c1855d7761e22390cb3ae789f930ead10f83ac8fbe62d9f5218619e1b9f7e5d0a8ad920160e243c07baea9f60c4dde3a","ssdeep":"3072:1jZ7a3f3al4Iy6XZnflsVR3TFQ6LKCt2vFAOCh+oYgvVaewajapE52BN1dMOoGtv:1Na3fIk6XKN5Q6+BUILetja652BN1dhn","tlshash":"4af31266ce1e6493ffbc487563d5d8f2e7c81aff1baa480436879404b6238941adb41f","first_seen":"2025-03-17T02:22:56.851932Z","last_seen":"2026-05-30T13:06:09.623324Z","times_seen":45,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":452,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/rc-logo_Card_1.svg","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/rc-logo_Card_1.svg HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4686\r\nLast-Modified: Sun, 02 Nov 2025 11:47:28 GMT\r\nConnection: keep-alive\r\nETag: \"690744d0-124e\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdfce34b0d48c10adb6c8752c5647cc0","sha1":"eb908c34a18277adc3fd5ea2c214af297d705f6a","sha256":"2621dd1a508014e3adeca5857a2df1226f9321bc74039fbf86ee1d7b218a8f96","sha512":"ada1e13981ab451fd047bec18b767010fbc54672b9b517f38d2a9cd81acd8a28b5245e8cba26844bf490ab691c3475daf5ce0c990ad6ae8259939a99874099ba","ssdeep":"96:l1va0uAPfZs4S37MZ/YBUp5STzix0neZ85qXEuEzxnaPJW:l1KkpsaaeyVhzxnp","tlshash":"b5a181f3361d22e0ee430fa4a6961c39952f28f72ea28ed981a457f97c3606d54cdcc4","first_seen":"2023-06-10T07:08:00Z","last_seen":"2026-07-15T00:23:49.536802Z","times_seen":204,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/D4oXZ1Dm.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:40.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/D4oXZ1Dm.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:40 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-3b16c\"\r\nExpires: Wed, 29 Apr 2026 14:32:40 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242028,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26264)","md5":"6cfccc30f39badc847e261d86ec1f49f","sha1":"f4a455ca543c0d4d34cc57045971795f11871107","sha256":"0058e1fabb1e03c317b6d3509d2bd98f0ced8833a96d7a015672c9cafca3990c","sha512":"b19c93ba07ca576a63c621f07721d33698827141a132a71d4fd7ad5649ee9f9f938117549dc98fe413c150a77f5d81fa269c22cef667892f5b7412ff22ac94ce","ssdeep":"6144:g5TLZcJbzQ08VVNrSDDQcj6JPdEmkHrW8maaLtl:g5TLZcJHQ0yVNrSDbj6JPqFmaaLtl","tlshash":"5d3439c97296b06253b328f1017f100bf23a2a6a3849d498f19dd9ca3d79589c17bf7d","first_seen":"2025-11-13T03:55:26.121599Z","last_seen":"2026-06-21T14:15:27.126789Z","times_seen":113,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/HUrAbw0B.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/HUrAbw0B.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-52\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/B1mJW4nA.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:42.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/B1mJW4nA.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/D4oXZ1Dm.js\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:42 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-a1b2\"\r\nExpires: Wed, 29 Apr 2026 14:32:42 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41394,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"f2f1e8abb054423152c75d2abf5940c3","sha1":"a0ffe897c0ae0f0f150853f559069d1f733b3238","sha256":"7de3ca0c09d229344ed792cfe80f2e44c9bee56eaaa83c2b9509c96b8f8b6f68","sha512":"c66506da653df2ad3c718f63f3f351801d23608b5a4dfc05dfbd610b5ba67d4d0b7a7d69853b07785a00d4ef9fea4fb6d51a0062b5d0192d1a0200189dc9f230","ssdeep":"768:YzJENSox0h6wlGVpUQJfFJCy+K7WE+0cGzksqfz1BcUDxnvwTM95JhKS6DSBiU28:HzPQ9cEXMA","tlshash":"1503fac8b261546683e2a1a384750203f33999157408865cbb2ceef7ad7eeca7173f75","first_seen":"2025-06-24T22:10:16.163277Z","last_seen":"2026-07-12T22:39:11.977554Z","times_seen":19796,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/open/?apiName=OAdui4KpcHIkUkNP2R7nDQc6e%2B9h18zX54xOYtVtL3uACMhP8ssibiHQY%2FQ8%2FpsV","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:42.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"POST /open/?apiName=OAdui4KpcHIkUkNP2R7nDQc6e%2B9h18zX54xOYtVtL3uACMhP8ssibiHQY%2FQ8%2FpsV HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 549\r\nOrigin: https://sewo2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":549,"data":"{\"data\":\"n%2F6RxRNwC%2BsP1x55NEORTzuMGkaCes375LdPPyZMwVO%2FNV2QY92G5xWtXc1mfFnDUk%2BUBvrlq2qfUhYpgvQvy6iNVL45RWnaHrY3b9S25D2XPiFM%2BefHESlCw7oiZPHbCr1ds%2FsiSNH1EXM5pHrWw2euJsVmJypCOfLLnJ8PoyuKzlWLEAGbRIF8bgWINn8qJvx9SVUzdbrNchX7zS6sydnejX5pyMWZ7lrf2BX298Xfhn7cG8aukPXhWHuhlCl0mzO5I3FWf%2FQudJbN0Z1unYr1fB6sy9luFLEGevKMmq46HPOxS2ZB4MtbBAUvR02Sl3SZ4eYe2kVbTndUHw7%2FKO%2BkKOOjhFCrVuIHRYGUJQas90g4CvB4InYde6K4JYm7LZHoGdcHgE0IaSrFRHnNyzlDJACq6T6%2FR%2BV4Cudqz7M7m9NHvCy%2BmUojib27Vo1hAQHQCR9q%2Bk9XJ0zq64ljeC6HJUlQJTdN0eFalkY351V1VlisPi5guro6kgHy2Ad3\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:43 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nAccess-Control-Allow-Origin: https://sewo2.top\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 30 Mar 2027 20:32:43 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"330ef2c6d11f2aeafbf8425ed704a460","sha1":"36740edf542c2160cdf347729214f264d0bcbc19","sha256":"670d7304ce0b62da6be961a840d35b2ea97ea3dbd11c68d9629fe53fc086009f","sha512":"6f237f5aa4d4aa73d1491a26d655e8ccc7a45e210cc0db820192ba34774af4f7e70d0c8af8ef3186e14b537ef7c6fd98ae246b0506450887e1bd238a7d62a24e","ssdeep":"","tlshash":"68f0d4297198d9681e4f2546475935201ded6141b3dc2c1fee0cef6016f6ba85537015","first_seen":"2026-03-30T14:33:05.743094Z","last_seen":"2026-03-30T14:33:05.743094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"sewo2.top/socket.io/?type=user\u0026uuid=c711c534-fa56-4aa0-95bc-986fbcf546ce\u0026isNewUser=true\u0026EIO=4\u0026transport=websocket","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /socket.io/?type=user\u0026uuid=c711c534-fa56-4aa0-95bc-986fbcf546ce\u0026isNewUser=true\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://sewo2.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: A8t9+M6UHd1Htu4KWiB0tg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:43 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 3uBXhMbs3cYuODr8XxCoWBFot6Y=\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T21:24:26.350516Z","times_seen":17460679,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":1,"connect":148,"send":0,"wait":152,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/open/?apiName=rt2Gs408I8oYqoqMGP18RHlXPAlEZjYHc5aNwqJacQZo0QFuh%2BV8LZ7a%2Fa9HQBfE","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:41.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"POST /open/?apiName=rt2Gs408I8oYqoqMGP18RHlXPAlEZjYHc5aNwqJacQZo0QFuh%2BV8LZ7a%2Fa9HQBfE HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 3629\r\nOrigin: https://sewo2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3629,"data":"{\"data\":\"NaecQ1nD0eC4%2BSicORyBlnjGuT7ieywiDZXSeA4etndu4qs6Ac2bYFnLk5Sssc13pmYGob%2Bfe28W9hB2GmVardYSTbhs7BUZGB5%2BlhURG1KO673iqsZr8uMW4vmtFGNaAoE1R8u2TnAk5JhwxOLIvRMxoUWDA9KRA%2BM2SiemUlNQWZznO53hLQyn%2Fhn8f5qZOL8MsSmZgVIJx1Ocyk43wMMeI5hvIhD3SD66gvsOojNN6jHxVMN7EnH59qZZw%2BD5Ll9Jve2Khq5cW8X%2F9ea1e%2F91iZMU3BNajen%2Fcv3NHLzLHU%2BWVA6Io1hYbL10wIlQcMqlNuAfXfXCLKWCE9MOg3ARxzb3W3K7kU%2F2ihF78onMnWmj7KOTTg3HxqZRDL8SGC5WT5MQCD4FPkrI9NqU0Wfgsrzf2CGF%2BFeSWd5MuozUDuRCnmDX%2FOsKR1PJCVY75OMMcFornQSgYs%2FdyfrAvegvRVBSVB7%2FIFwYiBsgZP97aoPc3DR7wARJ1Sa0DLhBLKLXLzRnh3uRQaSvYPSaTV2fVqaG9GL0sBVPpW%2FCkWMTNBEkymQVizwwlTG9AmVVC7f2HfGOFxolA0EL6KNcakj3BQiRUqp2Sy1lyhow9%2Bdu76PSmK9%2B21juvmEhW2kkopFlkCLenrmwDHQG7uS3icXgZ5DwN%2FnUOGIBUt%2FFhgDKjkTdzSNCmZYW%2B5UaaNsL4eM%2BEBvXDnNm8WiNOo0REwKs3OZMCAcA5JdjUojLcjE6G13GL%2BvKfqTpy6qu4NrA3inm631%2FowpvB171VFzxDucKpDtgZgDx5j%2B9K8PPrM88J8vMMlsjOGVV6ilY664uzbG0T6qDWX%2B3f8unfuI7lElvhOsAnkkra7W4GZfU%2BhfmFL95TTt1VlcOy0e3QKMtqI%2FT%2BhKkjfn0wbfQjxsfeihI5UiLF7ZId%2FPWd7ELQb2Rk7XeH5CErvXBRHjhe8gXqcoAk1eKKvJ%2BsqqdGK3MiG4vRm4O%2BKE0SIdA3p4aXK4tSJhsIDWAgpixZG4E3K93I2fQDJgUsPqQUTPIKRZ0cPN9f5%2F0x2XRik87Pny08qSbem3zyUicEMCanIgzj%2BLq5N6gZbUINsa8%2FmXte%2BNR%2Bl8DnXwasgM1AKPzTjMcNUVuNRvvVi2onOPtZdQcgxBMDiCABHa0pxePq6Bn8W%2BRHUxGhsNnD%2BYwjTlMvQKML66U%2FhrP9g9rsfM8t93cw3pq2lmTOkhLav23g9ZVu4%2BYnlmZKBR6jbFgioeRIJlWh5dJjAyHf1aUCLJZmTSvKQgfRark3MH0VxFU1AgDaBh6RM9Bj%2FuW%2FDoIcnoI0RoXaNKhaeyTUoyoLhYdIGRFOytp8D2eds0EEsBRpsMSbKdn%2BnFKpQA43r2DLku1%2BASuRWLE1fGmD0Fh8UaF1puMGqwjZosVvRYvAEdIWCsIqnRXA5%2BfnlL2QRV2Nt9U2nhawXXc2Zos8Phy889p%2BparwsyrlUG3o84EcvJzrtyLTbfzlbmIuubrbMeo4U7qQHUNH1fL3SgWePLE5sAbv0Mn40UYmOMotP7OeQj6NGssbHTxmJ3m7IaqGPJk0RUIIYwiD9Ti%2FBYZAd2mu%2BgXl%2FaPlk99jTogb%2BOyve63Dch0wNEgjKr52mUiyvs6Zqq%2B3neNDJ2lTMN7eKbepzYnEK%2Bv9CTFOg%2BnoA4F8CtuLoch6HBttEnJ72RVPQMwtM1VJD44Nybgt%2B%2FLfkGVw0Mf94a9T5sAFOcE0%2Fd2yr0GmLTecrEuWmfkh%2Bep0uHCulcw8bB%2FSq2gwVtH%2FYN%2FgtF8dYvK827vTWnASoyTxU3jH21tiuAHQPvkkMWv6QhEceEOH1UBokQjfiJ4SvtCgvNl5ern09ofhU6EVS1YsM%2FkbgMkQa8tbqS31fLBsghbcWeYSvxl8YRfb%2Fjpnv8Amu44M9zCrvQ%2BMdi57hfdhC05J%2BOM%2F%2BTNgvlmUD%2F%2BQf72UrDvDAmw6Cq1agVVYubs60VIP9LTXLmk7oWvMmJYAaB%2BR19SyqU6bRC860XK0izpe4HoUdPB4tNwKr3p%2FRcHuVkZqzypJTKwrp9mUqSGSNzDjOpGx1u%2BAiLWRfsgfhnJRXz3BFNMWgW6afKRC3D7jyfPILOrb%2F4wgXbIMxB0Uh6r7hfFd7S%2BEQA5e%2FzPWq0RVbGiedSm7h58CNI4YMyqqZUU%2FjgsOPl2cPuoY2imcaqFKtpbESE28EdEveISNMwRd82%2FF3nEOpBBn8qPibNvVhCPRgDxlctLoBrkZQBHHf%2F%2Ba7hVTvwZRgBY6ESKc3YPPgH90dgsOtB6Ek45Tk03%2BtfkO6onOqU6sC3ykoLvfACkUWoOYHbvJLITpfnWsfxKB2JdiXDKtXVc4XqUqWLPWNG8JpmKKBDQ2S17Wl30l2FYT27ivjIJLCqSSfEmBB59zCBKAcKusRHYekMepmzn4fbciAbJs%2Ba%2Bf89Fq802xC%2BnuU%2FHGNcpHnwJ0bKmsw2mF4M5BctjY%2FOAzBaDYJU06wqHho0BjoDtFWkKoKGjEiQtA1hAcQXDoACCbWK%2BKB4YPNY4iNEPmkeDomMECBdnbaarKs4ld6t2I9KdkfCekNXScmjPeMIPrtOQiM6IiGKjH8o5YU254A2ODXvd78fO2l99MeA3XNEmMrWr9g2tAxwfWvS1mN5cCqLbBgB%2FcClfN%2BGk5a71sA%2FKxWLOCnHWKdghbTA3ys2ayO0an0hl04lBv12krwPIOJsOBpXSBmtF0CNI4t1VUmdnLVu5x65mXKS%2B6pm6%2F5P1R2C266RLJ9jie%2Ftjm6hFprvLOW372L%2BJszgI7RySdS2%2F9c%2FsaxHW9WG11movQxqMtQGcgtg646IM7soa29UhJVtA%2B389RTXCKdxNR2ijPymO1xxnC3B8o3Cy95ubjzgvjzhwVwHjjzUgktrllm5kN4kONDUFwGyhZpZt6TVUGInxThIBsUL%2F4TUP0QZNmzOsTsbEkgy%2Bh0tAVShonaXX82dYOJWR3ChWcndxXnj3FQWfZ3g2r7ORTAvAZTXX9eUvAOaPQmGfTGlcFx8sVE7qo1TjDDxGOCcjsvXBrYxZWTTttb%2BPS1CkbXJNs007i4AVVflaboYxxP6cg%2BXOId5QCR4885xva3aK%2FxZ%2B6HQvd7LHrKWwFgSvCBRs7zKZVBNX3Y%2BjzbNzJeAWhD0gGsYjv0kWpXupZWNgm98UUaIMTXIyRrpfScaBmcON5cVAnVezgftXy1yATGc7t9c9%2FZ4a%2FSFpBpA7p%2Bs7jpUITw07UglSPT5bbjjmVQ0alfJOJL2rxyNQfAtjoT%2F2lfWR796V8haaNuycfqxkapj1Jk5NCbBc%2BSko9oJIIoBZ40%2FkPAxO1ohLiCY9N5XkiBmpGUS6VwKvgfchVu2uLo%2Bx6t%2BGcfVyLWBEnjEYZobRQbH%2F4Rr%2B\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:41 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin\r\nAccess-Control-Allow-Origin: https://sewo2.top\r\nset-cookie: locale=en-us; path=/; max-age=31557600; expires=Tue, 30 Mar 2027 20:32:41 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0a4a09f97c732edeabd8580d721e7c2","sha1":"f0e11c0e56128ba246d782c8678a2f88f4e2391b","sha256":"8bc55f760a8ad956e66394c3a32b26711b660c74d20d358b35ec1e3b2ba2c728","sha512":"1eca591203c21924c9b9582a162a01001acf4b5f1449f7842a0d171e99b265a34ca9bc7eb61d77ce4601e20e8d51748cc29b8d6df0072a6b9b91b6c6da0dc41c","ssdeep":"","tlshash":"9b800082020cace823233802320e2a8820e830a0c2802aaaac2c023c8f08c28e083220","first_seen":"2025-06-24T22:10:16.160171Z","last_seen":"2026-07-22T16:23:36.508635Z","times_seen":44355,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/css/BGNScNQm.css","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/css/BGNScNQm.css HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-5ee\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2285a156d31ae31f6d7a4118e3fcd0ec","sha1":"5e57979904190a225331e261fb7d479524a18dda","sha256":"ccfd53af66128ee99245bae9cd7330294eecc5a334c59fd3c973b55bb364dff2","sha512":"f8b957a43917abdd5bf3c6f91ab3c70456a1cfab6623dfe2be2b2e2065815367564dab5353bd569ef8484481aa5cc7f9960fb8294fbdd7dde9ae44517f08b0f3","ssdeep":"","tlshash":"ca3118021e54e360ea8788127ef38326553a151bbee63bff1da13e94d70f609e645288","first_seen":"2026-01-14T03:52:29.412087Z","last_seen":"2026-04-26T07:06:42.531699Z","times_seen":24,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/BVgA2WaO.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/BVgA2WaO.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/D4oXZ1Dm.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-6ef0\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28400,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27143)","md5":"b85f636e7ba0169a5ab357ff7bbaa3a4","sha1":"446fb88bfa2bfe8c9651d3d56208e6977174423e","sha256":"428f81a30d31e031668ae909ad43a10478c47b995b0163da1010fffa46b0f01b","sha512":"26f424bb59797b9d34614243cce23ce73e3d98b3f8f026477b970cc39a0b3f7c2883854019ef0db8591bcf7f4c8fe136d925566a565989fc0e6e6d62c5c1bf87","ssdeep":"384:iNWyxUgexKRgVHhTPiQ7zlZpxphuxpPHIX1mql1ZkrpnfYFaKjPl6g:iNWyaOMiKzvphCN+1mrBfYFBjNP","tlshash":"71d25bec72a086f9912bc1e5985e2000f03daf76e49640b1f2bdc9702996dc97b91f75","first_seen":"2026-01-14T03:52:29.403554Z","last_seen":"2026-04-26T07:06:42.536153Z","times_seen":24,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/HUrAbw0B.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/HUrAbw0B.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/BVgA2WaO.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-52\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7db5601b2b0bb369acbf65f8a2b1a9f3","sha1":"c70f40d35ae96903929c6b9751954c784292dda4","sha256":"d3ca37963b252b0b1c2d61d7d5505c68ec469681451546785cb31b753ae88200","sha512":"60be1304bd25afb7baa4e1d16c66f931af07f389c5c736f691ec060a46e41f1842b4dafc221fb2f9c9e587932c236c2448cccdd07426e374c827718c2cdcc1e5","ssdeep":"","tlshash":"0ca01202444d15ee0e1000594b449928057204582d3402635c0d0a2447151414e0a505","first_seen":"2025-09-19T11:50:12.656606Z","last_seen":"2026-05-30T13:06:09.618709Z","times_seen":38,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/Dw3qHFpU.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:43.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/Dw3qHFpU.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sewo2.top/jp/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-54\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b48227890a8515fb8b6125a027ed1bdb","sha1":"e2e03519ddfc440a1a8867913b01b853924f837d","sha256":"9fdcf69dc7a9e1e635ade466fd74877293c20d52757def15adda5c4d904c163e","sha512":"0f17f862b8ca401337b87b1f199601b142455894ffc8e762af009e3e87d8eed22fe57bad8119b3fc9e7cc4c7c7769c519a0184abb52a1713793d7572d667029e","ssdeep":"","tlshash":"8aa0120355cc26bc0d2000390b01d62c467104182f641361a40e0a2c03059512e09541","first_seen":"2025-09-19T11:50:12.641032Z","last_seen":"2026-05-30T13:06:09.600054Z","times_seen":38,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":436,"dns":0,"connect":152,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/DRjFm3NY.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/DRjFm3NY.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/D4oXZ1Dm.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-47e7\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18407,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17907)","md5":"e3c5ddccbaf25a166f792b42ee0a6283","sha1":"c9c7d69ca450d47f20298b028ce9e80201e147fa","sha256":"0ee374cd0e199a88b201b19d6c3c8fd1c7820a7784235aba2a1ab01090e8a84f","sha512":"a281362a511262975ee73239c90c2695fd63efe23ed06f9d764661ca9c2632cc003e0ab40d0b1ff00674bf09b0f7b5db960fdfe71a4c1ab855f447ca33bc6797","ssdeep":"384:5sKWO9sEcBh0s8AxNBTxFfkhgiSHv0BwlrRiGj+TGGZHcqa:5sZ3Bxx3xFaFMsBwlrRiGj+TGGx6","tlshash":"f582d82cc200c17df07f82ad21d93554b16d6be5d15249abe6fccdb06e06e78d61eb28","first_seen":"2026-01-14T03:52:29.375559Z","last_seen":"2026-04-26T07:06:42.53488Z","times_seen":24,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":157},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/assets/js/CyXnbF32.js","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"173.254.207.115","port":443,"asn":8100,"as":"ASN-QUADRANET-GLOBAL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/assets/js/CyXnbF32.js HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/assets/js/BVgA2WaO.js\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Mon, 30 Mar 2026 14:32:44 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 10 Nov 2025 11:44:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6911d032-5984\"\r\nExpires: Wed, 29 Apr 2026 14:32:44 GMT\r\nCache-Control: max-age=2592000, public, max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22916,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22915)","md5":"9a937dd89623aca8c82d670a9e0ccf32","sha1":"5751970466a6c82820a28906aa494e6f7523463c","sha256":"f2e78a866b3d1eb96139f1aa36dcacdf5f7b6fa8d800f52de598b764df1ec3d8","sha512":"9c7d51b11663c5c522d4fb14e66f120c932355be494313ce84fe0ed5bebe1cce38b5f8aec6332c80fc00a148a4c1127177b6228673a52f8d0c142e2b67d4dea5","ssdeep":"384:/mKyLbS1qvEG6hB1Ah4R4mGn6BhWDXBBpHRyuPxGTs1GhEsF89wpLLUIZ3ojv9Pq:/mVgqvEG6hvGn6L09RyuPxGTsY2wpZWI","tlshash":"daa2b9d9efb0b2f8a98d6f4daf316c98315b25fe3e33cf54819d8b80558394c9a48854","first_seen":"2026-01-14T03:52:29.416425Z","last_seen":"2026-04-26T07:06:42.530993Z","times_seen":24,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sewo2.top/jp/rc-logo_Card_1.svg","fqdn":"sewo2.top","domain":"sewo2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sewo2.top/jp/","date":"2026-03-30T14:32:44.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sewo2.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:41:40 GMT","end":"Fri, 26 Jun 2026 14:41:39 GMT"},"fingerprint":{"sha1":"9D:D5:E9:AB:45:05:63:1E:0F:44:38:84:C5:7F:91:CF:44:B3:B3:88","sha256":"91:80:66:9E:F0:78:83:8A:D5:59:09:C1:A2:6D:79:84:03:28:23:21:4D:CE:48:AD:BF:32:D6:E1:E0:82:51:39"}}},"request":{"raw":"GET /jp/rc-logo_Card_1.svg HTTP/1.1\r\nHost: sewo2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sewo2.top/jp/\r\nCookie: locale=en-us; uid=iT1DuYSPLVUrfA5h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T21:24:26.350516Z","times_seen":17460679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sewo2.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sewo2.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}