{"report_id":"db854939-8b90-45cb-950d-8bd91d43334d","version":0,"status":"done","tags":[],"date":"2026-10-09T16:19:49Z","url":{"schema":"http","addr":"net-htx.cn/","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"net-htx.cn/","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"title":"火币 | HTX电脑版官网 | 火币官网下载 | 火币app下载","dom":{"size":59493,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363)","md5":"f0f6166f34e03cae9cec4913df2c5390","sha1":"8e0e390342a293b522cf8da51e6f9f3ded7a4a92","sha256":"4a3d4a8dd5f86b1ab8dd5875c6264a2d920251fa8d936424aa497c6297c057d2","sha512":"2fecca5e930c10c09d0ca30809a278a2e307cfd663260195a3edb059ea29161bbe1d5e6601528b03b1558a1b65d175b175d3b47a1bcefe9c5187c62dae0d8c08","ssdeep":"384:Kk0mUkHrXrIUPlXrlNXrhXrUXrqhXrRguQvDMo9OQKOiNdRj7bMIxAR1FS:t0oHnlVltp+qpD8DMo9OQstAR1FS","tlshash":"8843ed603cf3582220af90cf51171a0e6ec0eec7d857659475bc8ba49ffac92bb97518","dom_hash":"domhashe21a64d6f563075a49d75bf91150e82c","first_seen":"2026-10-09T16:19:56.444983Z","last_seen":"2026-10-09T16:19:56.444983Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"net-htx.cn/","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:19:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"net-htx.cn","ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-09-20","domain_rank":0,"first_seen":"2026-10-09T15:57:09.856315Z","last_seen":"2026-10-09T15:57:09.856315Z","alert_count":30,"request_count":30,"received_data":1208628,"sent_data":16335,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"net-htx.cn/static/css/style.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.399Z","timestamp":1791562550399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/style.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d406-c88a\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51338,"size_decoded":8582,"mime_type":"text/css","magic":"ASCII text, with very long lines (27525)","md5":"5d888445cd09ad35891ac468cd8b04cb","sha1":"e439d567badf4158793df7422292e56283befcae","sha256":"fe9ad9796d39e706fe661ddf90151c0ebc03251164354d55f1ee95ca06878b40","sha512":"e5d59abde5d4300ccdb8900f4b0a4d945e156e5e620ed9f806816f6148643d4eb603c2655dbf53f03ac30cfb313d2fe2a074903d0e7f22ab52a02df17c62f8d4","ssdeep":"384:FLBgc/HBZDO/KRUb4X1XGb+d+AwlVHI+vg7Y3K0dXSNXTXlx:Q8X1XGb+d+AwlxI+vg7uJOTVx","tlshash":"6933212913b5ccf935afab3c8d9df248e441a980c54a97e7f436e050624c99a5cf3b1b","first_seen":"2023-04-05T03:49:36Z","last_seen":"2026-10-09T16:56:45.731443Z","times_seen":3295,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/fontawesome.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.456Z","timestamp":1791562550456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/fontawesome.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-e238\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57912,"size_decoded":13121,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"3df0b27b3e75de7efd800af1d77d56cc","sha1":"e8138ee186548f18db7642d80860124b86809446","sha256":"f8d00356859998784bda26e1d14f2d981515921b96ded50d5d6f6f0e75bac15c","sha512":"909df41fa838346856a2981db1e45bf304ecca5945518231de1894c2618092003d07f25bcd4043415af655595619d7bab1d055386ee853c00bdf93910ee326f2","ssdeep":"768:OEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:OE0PxXE4YXJgndFTfy9lt5C","tlshash":"ad43f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T15:07:49Z","last_seen":"2026-10-09T16:19:56.450361Z","times_seen":1852,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/solid.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.458Z","timestamp":1791562550458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/solid.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 644\r\nlast-modified: Wed, 11 Mar 2026 02:31:34 GMT\r\netag: \"69b0d406-284\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":644,"size_decoded":1149,"mime_type":"text/css","magic":"ASCII text, with very long lines (458)","md5":"0729bdd7ec59c57f38e6cb42d02272ba","sha1":"47601af26b424dbf16f12ebb6cfe1760ba02d557","sha256":"997f7df95b9d0a8414b8aa0bc47500ad086e4a52f8f1d7f7ab6aeb4368c5ceba","sha512":"68a4690cb9695f188904fe05fd53eca2faf68ed9c6d17b743ab52f67d8ea1ee195de2b43e2512140e543233c062a057d892867836a42e0e86975b02b504b639b","ssdeep":"","tlshash":"fcf02d2e4646395341c70f1238d6fa5dad06309938582b33a21f8cab8cf9e5b21b9f19","first_seen":"2026-10-09T15:57:19.223271Z","last_seen":"2026-10-09T16:19:56.451032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/eth.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.469Z","timestamp":1791562550469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/eth.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cb-39b2\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14770,"size_decoded":14913,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d4179ecaea70887bb4aacf530915558a","sha1":"99058943b099d67be488af25d08fa9307c71e3a4","sha256":"8c7e17e3e1a21367c7373a1e2d47acad8d002c30656e3d0f58725388bc0065e1","sha512":"3525c731b1ca1fc71339786c5b6b9b29c5e26abc54e521b4685f925bb8da8edf67bd5688d7519b52b7a33b6ea9d6967d50e9214a7e685158a2b5c9c8df429222","ssdeep":"384:uTzMX1v1AuSx5bQrRqyVgWYj+uR4tziHZI:uPMXheuSxBIRqGqj+uK42","tlshash":"6b62d0c8472cced0f3495c42e958c283b9ba6911f06a6c78a0758d1cf1b5e849f3ebe4","first_seen":"2025-06-15T10:01:13.380585Z","last_seen":"2026-10-09T16:19:56.451888Z","times_seen":32,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/jquery.fancybox.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.404Z","timestamp":1791562550404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d405-31fb\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12795,"size_decoded":3619,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-10-09T20:55:32.024516Z","times_seen":54222,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/frontend.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.450Z","timestamp":1791562550450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/frontend.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d405-1cc44\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117828,"size_decoded":17651,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497)","md5":"a7a6d73a32d69278b231a9649b0ab658","sha1":"5b3bdceb03d3631be0038d748267dcaccefa0fd7","sha256":"221eb0d730133efb948364d3a9538aceee48511f721e65481ea2bfcfbae5a933","sha512":"7ae2e0c60214207594ab8c298435901a6bd553a36f9b4c429c4f794648043390e037e0bdad2c4973a4924a4c5daaec3c2d0997a6f2c54e3facb6188a068be8c2","ssdeep":"768:Zf6VYI8DUx0rgxPm0Em67bKIMs3P8nqlyBPGSfk29UmaY/KffQL7x9LqHGufiHue:ZeGpmdiffQL7ymufiOYRDddHP","tlshash":"52b373237d076109222f492b5683768c62a4d1c5ed937be9fc91a807c7fbcd43b3295a","first_seen":"2023-04-07T20:30:18Z","last_seen":"2026-10-09T16:19:56.454798Z","times_seen":286,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/frontend.min(1).css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.453Z","timestamp":1791562550453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/frontend.min(1).css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d405-337c2\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210882,"size_decoded":24270,"mime_type":"text/css","magic":"ASCII text, with very long lines (65493)","md5":"6c1632bc25b1b96c4d65841e85ae9371","sha1":"3dfbdbe098936e6275e446c093d0b6a8c060b540","sha256":"d0486fdb1b2151c14a59eab883d753076861139950f056474c93813a2e7129de","sha512":"478f66bf3731696d1972d7b3d11917c6f59c4a3687047afa56fbc5f9e8f0e27817c2da370138a51119e2d582235ebce0cc4bac1a872bb6b6350bb7c27adc017a","ssdeep":"1536:mYMp3bC2HuQYqUlwpR0/srS8rwkJkmkukxkOkNkekvkF:jzqRIsrSe5","tlshash":"a22476b2fc23111d512f593b93c7a28c2a68c4c5a55126eefc62650b87f7d98337a70b","first_seen":"2023-04-06T13:53:11Z","last_seen":"2026-10-09T16:19:56.456886Z","times_seen":386,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/ltc.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.471Z","timestamp":1791562550471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/ltc.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cb-ecb\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3787,"size_decoded":3400,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"cd5c3b552293471177e1c575873796e6","sha1":"e6250a5bee3f3a85426ce97f7d6d3c29d2d6e630","sha256":"b6f7cbdd79d82540839ed63eac8fe2e21d37a0f74fc25f2ea8222f0a85a79ef4","sha512":"e112226767f8a458bb3f26c4712f0c0d2817c3706f45ccbfb50b99952b7f12510c930334ccc3ef70b788cd2ae82499ebe8e5fb3cee64061e499ab325cbc2e69c","ssdeep":"","tlshash":"a971184cfe52fe12ba4ddb5865f89267263b77c00242a04cfdda851a1d7113ec80d9c7","first_seen":"2025-09-17T11:33:49.725604Z","last_seen":"2026-10-09T16:19:56.457533Z","times_seen":12,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/post-97.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.455Z","timestamp":1791562550455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/post-97.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d406-bccd\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48333,"size_decoded":4738,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (46414)","md5":"49edb5280e20ce68b618e006e16626da","sha1":"4ce0fef4f8b5b8a9a6a90da12524e99cd51f4dfe","sha256":"500d461bc9376b824bdbc926880bfacf3fa80aa90e9d588ae472a891f2f77b79","sha512":"bfbed7b826902d7d27a896972e9320142ec58cca1a7b1a6f89bf14bb240b3fc7a9dac2b9e682f2e637fcce91f371fb7dd157caa72fd8fc3bb7acf655af93f7da","ssdeep":"768:8AO/7Mlk2BncLYIOs7ApDPQvKkw9PmkFpO+wc3QTOQtTxIF3/fcf2MpEz6w5whw5:b6yiXvI80tVtKEMF6yvaCv4wz3vgWOF","tlshash":"1a23df9a7cab4025757f258b5153ea8c70308ccdd8bf76d2e822a417f875da133d2e26","first_seen":"2026-10-09T15:57:19.237502Z","last_seen":"2026-10-09T16:19:56.458376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/logo.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:51.245Z","timestamp":1791562551245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/logo.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Mar 2026 08:52:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69afdbb4-1866\"\r\nexpires: Sun, 08 Nov 2026 16:15:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6246,"size_decoded":6771,"mime_type":"image/png","magic":"PNG image data, 463 x 203, 8-bit/color RGBA, non-interlaced","md5":"36daa0e94bd1f59c89fcab101e92866e","sha1":"b1a39758bbccaded3aba151b0bd27bfc3cce85df","sha256":"7c3ade9279b370b70e3ec7076048cd0f74fb079852f34afcf05c8627c6018ee5","sha512":"2911449ea6b6b4d575d4eed193b6aba987b1ac974c9b632eb7379e889e70bdd620cd8d3792c904c92936fe6813be6ea3e64b87e139d47a29804138befa3d15a2","ssdeep":"192:93jIHsLQ7YaBnMrCX/1nwhRIsWxR7FihE5Ftn:JjRLyYaBMrCvMJWjxj1n","tlshash":"89d19ddc0d68e93ad2d91b23416ba02b0de314f879dd1fd80b747b1adc971bc8229287","first_seen":"2026-08-17T05:34:10.139667Z","last_seen":"2026-10-09T16:19:56.460993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/elementor-icons.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.442Z","timestamp":1791562550442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/elementor-icons.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-431a\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17178,"size_decoded":4104,"mime_type":"text/css","magic":"ASCII text, with very long lines (17132)","md5":"7ef84a121e4a03e252a0511bc5bf41c2","sha1":"ed4d23d079b38599eb2c3d9e9c3d46211d39701c","sha256":"c463476573847e5e261b18334ed03c5a8c2c14b8b674e290ce2f2354f9dfb16a","sha512":"8e4b0c02f8022f1f49796a104857a5610853ed744f6147e94a31a54127ae7fb38760103a5e6739a4d72b4b59103bda3f8fa825879103960dc9221483beba260f","ssdeep":"192:sI8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DL:kmK+JRQcx5ZETGNREmk4E","tlshash":"5b72daa4e02922c96bb1c013e3d0734e7409b921fed5dd59fa5ba50c2fe1693068af7d","first_seen":"2023-09-27T10:37:03Z","last_seen":"2026-10-09T16:19:56.46218Z","times_seen":11,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/global.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.454Z","timestamp":1791562550454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/global.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d405-85dd\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34269,"size_decoded":3071,"mime_type":"text/css","magic":"ASCII text, with very long lines (13415)","md5":"0085425a455cb0c6a417480183fc4757","sha1":"7a514409545f3331a61b472a4dcc9adafc17727f","sha256":"04a15a28bae1ea0333fac57591ee6f899a96b15a2dedf958dd6e7dba94f44b3f","sha512":"0d930c5f7c8e714f4b2dd282e67c157ec0e8b1ba85e23f2e6256e13e3e44b6813a87ca60cd7719daecedaec8fda42f9b30c841c95146a5b2255bf68bb60b8783","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6I6oyBrrYjBcD0NS6H0SH6HH04xy:QqRDtxBu2HWf","tlshash":"31f2e6987827d026f87b046f758ff47c181ca4dd5c4bcae7f458860689fbf2aa368614","first_seen":"2023-06-29T08:59:38Z","last_seen":"2026-10-09T16:19:56.462895Z","times_seen":22,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/doge.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.474Z","timestamp":1791562550474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/doge.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cb-b8d4\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47316,"size_decoded":47687,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b8783620fb1b314ed26115d143346008","sha1":"8d00275eae78b333e59777161d167e41a3dbcef4","sha256":"e0851cdae6423e701766f3bdb308e4816dea9b2df6a0083ddf0fc4cfc55dfab5","sha512":"455d08383e60306996864c51d191241101ec75093abee196bff3582cb1e76668bdecf98bfad32dec37555787db94ad915e9d6e7e6d5bf9c4a7d35b4830598e24","ssdeep":"768:FAbSqHjCBo5tFDzjwGX3eIIB6dcZDMCWhgfC+/RM5gQO8Qo3Yf5wNQ4jTFVHiD:QjCuiGpdcZTN/Rlt8VoBw/FsD","tlshash":"7a230246609486a1b79df773d737283e06373418c9eaec6fb94d73744f9ba8044e029a","first_seen":"2023-09-05T00:28:36Z","last_seen":"2026-10-09T16:19:56.463669Z","times_seen":35,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/ada.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.477Z","timestamp":1791562550477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/ada.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3ca-861\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2145,"size_decoded":2076,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"aef95f7c0da03851eedb8d1596259053","sha1":"a3b4c180068209d7f21c3c24c899902ad6ab8cf5","sha256":"58e29349c780dc41c719f69945369d0f3f9273beecf0d7c7608dc9e09d70a3af","sha512":"472a51cf5e2b38c67e562e1b20790e54c9a9086d1ba4e4eb915c43c351dec48b32f9689b0100b3e03f156bc1ad9fd420d41e17569ebad28945135568ef417c65","ssdeep":"","tlshash":"f8411c6a77ee7e0dc7b36137e439f77d92f9235d8413e0f8400040967f14a15409b696","first_seen":"2026-08-17T05:34:10.135693Z","last_seen":"2026-10-09T16:19:56.469046Z","times_seen":4,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/style.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.440Z","timestamp":1791562550440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 03:33:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a618b99-13d50\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81232,"size_decoded":17516,"mime_type":"text/css","magic":"ASCII text, with very long lines (459)","md5":"9d834d5749b6bc68806e72606b70c0e1","sha1":"7a66faeb51efdf9328b88d2e6f5b25be3b9236a8","sha256":"75d175a392f682fa04dbb13f60476bc7b662af975b13aa71eb53e56610048e94","sha512":"82cdbfaa4b9e72e429e496b7f93bd7a70bfd37fa3d12014dd7bced80735f5fa0acb656d01834077fa2492730d9a6e563f75cd7b4614054abc0ab331bb4363c55","ssdeep":"768:TyDW3YBVtWIIBrXKvc5Vn3mKChGU+Yb7Bb5PnMg/wBdZQUNE6FDQo3Jjotjcjn:uC3EVgtXnWTGAaKV6JDJejcjn","tlshash":"fe83fa659e90200db02bc256a6d0aaedd23c8453ea274ffdf22d3624c7851d9167fb8d","first_seen":"2026-10-09T15:57:19.202265Z","last_seen":"2026-10-09T16:19:56.469894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/animations.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.446Z","timestamp":1791562550446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/animations.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-4824\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18468,"size_decoded":3143,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-10-09T21:27:04.712887Z","times_seen":44655,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/frontend-legacy.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.448Z","timestamp":1791562550448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/frontend-legacy.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-f0e\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3854,"size_decoded":1050,"mime_type":"text/css","magic":"ASCII text, with very long lines (3815)","md5":"98f60a70344cb2abfdaf22048e719440","sha1":"2e3885350d106d895db341435a3a6612267f304f","sha256":"b74d3331908703eb5c31587411e38d14777980b6291f7eea8a9e862acc28c4af","sha512":"2d34520ab114506903967c97daacf9b184819ca96ec155e6cebbae99e6652fdd091b3467045e76cdb9c4f36d07f7fd2a9aad71e4203aa938c8b4f673a8b53aae","ssdeep":"","tlshash":"088192237e136225308f586b529b39cdc721a2f2c0923ae9f7e5d4139b76da07764c89","first_seen":"2023-04-07T20:30:18Z","last_seen":"2026-10-09T16:19:56.47207Z","times_seen":116,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/xrp.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.472Z","timestamp":1791562550472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/xrp.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cd-28c0\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10432,"size_decoded":10975,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f529e6b738d0e64775c3d552e008272f","sha1":"5fb7367ec882de470c0af5e79a99b4a71941bff0","sha256":"33107a9ed612c086da995e0544e66bd86cedc890f5adf1fccb2fd145a37a1952","sha512":"68b6bbfeef22baec624c36677cb6491fc2f837ccba565e820166eec2223db1e53805e43e529ef4413c965a79f99da9b68285a2038991f310d4423470b7e1755a","ssdeep":"192:rXrGoyakn7FbObz8dDJB3uo0Ve/pkj/9bhb6U9dMroQnZj4G6X:rXyFaA7obAdr+BHjblmroQhkX","tlshash":"0122c079b373b58ee55b10a8e5d34b53ad98016baf5d80428de1e68cbc80de8ddc4782","first_seen":"2025-06-15T10:01:13.41436Z","last_seen":"2026-10-09T16:19:56.473712Z","times_seen":32,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/favicon.ico","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:51.498Z","timestamp":1791562551498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/favicon.ico HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:51 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 19042\r\nlast-modified: Sat, 14 Mar 2026 03:45:09 GMT\r\netag: \"69b4d9c5-4a62\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19042,"size_decoded":19484,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 82x73, 24 bits/pixel","md5":"1ff7080aaa1815ff6ded6959b0c84b29","sha1":"d689e9513e113551be6216242204ed9f0c0f9835","sha256":"0374eaa25e3bb6d3bb07d8ad736a2a7b919cf991923c47c645a604104cc42286","sha512":"65ebb9f1cfa8f711d4daa9d75dc60d9b3ca7a1e6d9030ec2fbbcfff0878582bd6622f1bcf900c3ee030c81fa515866eac1bcc576cdbf8480909e415666363492","ssdeep":"96:g+lNP7euELSRnPiOzjoIP58Jj01+8Jm35jI6O2We5u+OOOOOOOOO:Z4LSRnBu35","tlshash":"0282ef64ac25d40bd808b93ae3ca992ce2b13cb19515dcee05567dcf47b23a06dde60f","first_seen":"2025-11-10T01:03:23.833716Z","last_seen":"2026-10-09T16:19:56.474553Z","times_seen":7,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/font-awesome.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.401Z","timestamp":1791562550401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/font-awesome.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-78cd\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30925,"size_decoded":7585,"mime_type":"text/css","magic":"ASCII text, with very long lines (30763)","md5":"0ee57824fd6cf8309f3a93802ebf5094","sha1":"323cf3b8694960f40ba8946188b5548a11bce11c","sha256":"21cf92449763595afbc1696275e86b4e650d7e6718da407ffbca130370080061","sha512":"3b3b06a87577a6080836c84e26e68754eaf9bb53f3d4bb5df24545de41f038e31d309d12bf48f86230ce1b09682c4dd1b10a65cd10213132de02c80a42fa78f5","ssdeep":"384:vu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:4lr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"e2d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c5fb9","first_seen":"2023-05-19T08:48:06Z","last_seen":"2026-10-09T16:19:56.47551Z","times_seen":54,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/bootstrap.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.403Z","timestamp":1791562550403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/bootstrap.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d404-26040\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155712,"size_decoded":24092,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"4ceb8e93b3298c60039e79814a9ef227","sha1":"3665a5389b7a20dd3b2fe9cb0ed3d80bec1cf2a3","sha256":"882f9a6a85743235cbd8889b82d92c70da49b469eb437c68c12a760023cd8e31","sha512":"259d3083a7c0f5b19514f85f905bedbaa1ed98d2f66664f5f84382d385741dd6b7790ecb819d4fd9f7960e9f9f05345edae164844ce8a792e5bec24491e0e5e7","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26u:b/Riz7G3q3SYiLENM6HN26u","tlshash":"e2e396a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-06T20:26:15Z","last_seen":"2026-10-09T16:19:56.476211Z","times_seen":570,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/btc.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.467Z","timestamp":1791562550467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/btc.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cb-57b7\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22455,"size_decoded":22998,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a2ee520517076f37cc806df1cfae5632","sha1":"833800beefb6ecf1547a44052d3fa47ad6379b22","sha256":"7aaec7e7e4b38d58eb08689518005229dc530fb9289d1a7dc2f0d57ad629c8f4","sha512":"435a1d3280ec92c898620830d39845482b877f1d1e37c0f285a614b024e2ee6c8b1820e2125e9366f74688cb159c1b26c769ea2a3d649220782a4bacc0c90b56","ssdeep":"384:guufg+Gzjx4LWNNr4UUAMb60LOV4zTlfbGM/NrGaC5IIDgeOVO9sKzqhjYvDq:guog+GewrpU960LOV4H9bZCaKgdo9sL5","tlshash":"00a2d19d348e94587b78033436b1ecd0b8334e815a9fed4267a22f417bea88fd943824","first_seen":"2025-06-15T10:01:13.434985Z","last_seen":"2026-10-09T16:19:56.477243Z","times_seen":32,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/bnb.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.475Z","timestamp":1791562550475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/bnb.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3ca-3245\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12869,"size_decoded":13324,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-10-09T17:32:16.433454Z","times_seen":6776,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:15:48.462Z","timestamp":1791562548462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: server_session_616445dc=52b23a129be29bdae0989b907b936538; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_616445dc=52b23a129be29bdae0989b907b936538; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59681,"size_decoded":7828,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (363)","md5":"c52c5c197298d6fa003f6dd75b057a4e","sha1":"23f2120e5c5c91c71f9d14578be67128cd49f991","sha256":"12929e812b546694bb80715476c752c1b96fc72e617091ac106937463bab142b","sha512":"18b2d1921f8431858755a62fc1fd83716f8bf184b040cd175fc5b0ac6f2e711c067e67b5fbf359af6a0768c8b908a66c6dfeee44f28e3a37e67914bf38fcd184","ssdeep":"384:V8imUkHrXrIUPlXrlNXrhXrUXrqhXrRgqQvDMo9OQNtxNwR6SbuIxAbbTg:GioHnlVltp+qpB8DMo9OQkBAbbTg","tlshash":"2d43ed603cf3592220af90cf51171a0e6ec0eec7d857659475bc8ba49ffac92bb97418","first_seen":"2026-10-09T16:19:56.479972Z","last_seen":"2026-10-09T16:19:56.479972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1690,"timings":{"blocked":-1,"dns":701,"connect":245,"send":0,"wait":252,"receive":0,"ssl":492},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/iconfont.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.398Z","timestamp":1791562550398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/iconfont.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d405-153f\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5439,"size_decoded":1717,"mime_type":"text/css","magic":"ASCII text","md5":"5489e43cc92e3ad98fb922283d1d5996","sha1":"2631366124fa058cda78aec06ea8c162947395cd","sha256":"8bf017aa6b645113b4006673cd0140bfd29727175f9027e463602d9b2eb69164","sha512":"4133c2ebf5847758451961817459aa13ae689a6958010518c505da745f5d9c1cace03f0255d65abba6a11ef697563d3e14411e597cbd6dfc6b936aff5d7b8633","ssdeep":"48:+5L3Ai1/Fe8BMf2Hd6SPPVFiG3JdM5WGR0ENqxdGgNJARfFAKFoEMTS3:+5L3A6/FereHLPh/2TwxNJArr","tlshash":"a3b1fde499bd2cb01318e4d13346a624ff1da2a85d870c5bf6a77c9ca6f33059192bdc","first_seen":"2026-10-09T15:57:19.200281Z","last_seen":"2026-10-09T16:19:56.481989Z","times_seen":2,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/v4-shims.min.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.402Z","timestamp":1791562550402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/v4-shims.min.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d406-684e\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":4775,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"fb073a92592d70e5aa6e3cce1cf93a11","sha1":"b9a847b0e25ec6d3c5a27a97d26b20a9acf2c1a4","sha256":"c0ded025aa80c10d37920521c8de04536a6145d0e42eb4186c57b412fa50eb45","sha512":"0fb0a86bf34910a56d2c257e00c1e115e4fab6cdf74a02584f5fb572c51184f00902bc9c9fd0e3e5f563232078c78f795d5b694ef7f1d63a25790b9733a37c51","ssdeep":"192:GP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:FRal4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"8ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-08T17:14:06Z","last_seen":"2026-10-09T16:19:56.482918Z","times_seen":1554,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/css/post-9.css","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.451Z","timestamp":1791562550451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/css/post-9.css HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 02:31:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0d406-462\"\r\nexpires: Sat, 10 Oct 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":900,"mime_type":"text/css","magic":"ASCII text, with very long lines (1122), with no line terminators","md5":"47f1f354371758bacce45b9df548ed87","sha1":"bc4528b121d539533431af691acd874c4fcab78b","sha256":"e83d3d1afd5d10a650c07a4a006b67a13d56000e09055bf62083264b5e4f5d45","sha512":"500af3c1da05f7716f5777a8c3a96b2742063d4c416ffd2d9cee0a1156ed69e7839b8d1a9cb920df4ef62251aa31b85f20878a8484810408ffce779e65ba8edb","ssdeep":"","tlshash":"b521be85bd73e433e0bb057fd2d7e028142cd42a519f86ebb01d8649f9bf70a9258943","first_seen":"2025-10-04T14:11:34.447499Z","last_seen":"2026-10-09T16:19:56.489019Z","times_seen":3,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/sol.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.476Z","timestamp":1791562550476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/sol.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Mar 2026 03:19:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4d3cc-8ae8\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35560,"size_decoded":35518,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1eade194898248b0b943a5ff58ea4b43","sha1":"af27e15f048652bf4002d93fc61ae126871607f5","sha256":"b135eb47caa4326c467d2b753e128a8d51cef3205a1b951cd1b6bb46d27b35c4","sha512":"46a8dee71afa89098eefc81b4aa597d6b251292ffab5723fde6ad10532fc816331d268f9971ad65bb0dc1aa034097625368112d565d273cc5495197e23a31b61","ssdeep":"768:jK7t1kQZuY1+6NxsIjWSL4EN8kuQpkprxSpxgOeHbubkiBOZdr8+Wnp:2TkKcmxsI4GRuQp7Tg7IkoO0xnp","tlshash":"3bf2e07fb4274188734ab2a7912b751efe1cd14b915e0087e8c9a63df100f68b79af61","first_seen":"2025-06-15T10:01:13.410775Z","last_seen":"2026-10-09T16:19:56.490502Z","times_seen":33,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/images/ava.png","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:50.478Z","timestamp":1791562550478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/images/ava.png HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Mar 2026 08:52:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69afdbb4-20ad\"\r\nexpires: Sun, 08 Nov 2026 16:15:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8365,"size_decoded":8908,"mime_type":"image/png","magic":"PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced","md5":"17b4ee995baa4b454deb7bda7db03e14","sha1":"d2f1dc7da14abe4f5175f0d9dc54b7948c7fa988","sha256":"707d76f8733d979eeb50e5b3660b08edc0f309d3c6ca3375123905e5b920d784","sha512":"e530d05be4eda9c442d54c82605c11e17a4dcc5de26e0ff15f5193a0f15faab8260779f58ca0c823cc77f952b073c841e60f15b2d00688dba89f5cb564950bd3","ssdeep":"192:kv2T58j/KiILK1MPY5UTYrLLHdQuqt5OLFxZi:kv2VA/K0XuUfHdWGFHi","tlshash":"b002bf0331d994b72c74085d7b584b2e03e9a89250e4c8c6bfcdaf4b4e51f47985bad9","first_seen":"2026-08-17T05:34:10.115683Z","last_seen":"2026-10-09T16:19:56.494493Z","times_seen":4,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"net-htx.cn/static/fonts/fa-solid-900.woff2","fqdn":"net-htx.cn","domain":"net-htx.cn","tld":"cn"},"ip":{"addr":"154.216.77.99","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://net-htx.cn/","date":"2026-10-09T16:15:51.242Z","timestamp":1791562551242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"net-htx.cn","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 08 Oct 2026 05:00:00 GMT","end":"Wed, 06 Jan 2027 04:59:59 GMT"},"fingerprint":{"sha1":"1C:AA:6A:78:87:7D:BA:E2:E3:02:3C:65:83:5A:9E:60:22:BD:A2:2A","sha256":"75:D7:B3:BB:D2:DA:4C:67:34:0F:AB:1F:46:69:BF:02:80:E0:1F:CD:38:53:08:47:6A:6D:AB:F8:B7:D0:27:A5"}}},"request":{"raw":"GET /static/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: net-htx.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://net-htx.cn/static/css/solid.min.css\r\nCookie: server_session_616445dc=52b23a129be29bdae0989b907b936538\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_616445dc","value":"52b23a129be29bdae0989b907b936538"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76084\r\nlast-modified: Wed, 11 Mar 2026 02:31:36 GMT\r\netag: \"69b0d408-12934\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76084,"size_decoded":76525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76084, version 330.-16253","md5":"f6121be597a72928f54e7ab5b95512a1","sha1":"b2c74520c3f506efbfefca867918e5ae28bd5222","sha256":"787d76ad6deab67ccf8bac1b584260205e114f508fc5542b612e3f75d49a34e4","sha512":"ff0dc2e7f41b5dda10f19ca4d476d6c786fa7a595288f9cb3db2c068293149a1b358119a9c1d9da616b5f9d3fd3f414258f295570e7bb755a665b143861be6fb","ssdeep":"1536:5aSdUQZ3ADXjohf3m4qWSmBItOgDmEyN1M8cKRBFj3JLnD29fsAP+TSd:5aeJpIXjoBmA7fkmEyNuK/95W9fbmTa","tlshash":"7a7302ff77b7a4eabc607780467253d3818aa059e48f507eca4d02dda69d17c2063687","first_seen":"2023-04-07T23:35:47Z","last_seen":"2026-10-09T21:28:42.884834Z","times_seen":8687,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"net-htx.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}