{"report_id":"e726c0f6-b36f-4e91-b793-019cbe41daa2","version":6,"status":"done","tags":[],"date":"2026-01-03T00:16:51Z","url":{"schema":"http","addr":"x.pzfdyx.com","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":0,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"x.pzfdyx.com/#/index","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"title":"TikTok Wholesale","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-12T07:39:41.696238Z","times_seen":1037339,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"x.pzfdyx.com","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":0,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T00:16:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"iamge.ustiktok-wholesale.com","ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-30","domain_rank":0,"first_seen":"2025-12-27T22:09:24.99792Z","last_seen":"2025-12-27T22:09:24.99792Z","alert_count":300,"request_count":100,"received_data":11849207,"sent_data":45546,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"x.pzfdyx.com","ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"domain_registered":"2014-10-11","domain_rank":0,"first_seen":"2025-07-16T19:53:16.015132Z","last_seen":"2025-07-16T19:53:16.015132Z","alert_count":252,"request_count":42,"received_data":7209020,"sent_data":19399,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":1,"received_data":60327,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/vendors~app.0ec2a4bb.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a884188a41c936a409fc34ca6defed3","sha1":"e2fe47d055162fa108a5eaf73b27463da2fa581e","sha256":"6deb9c021a7ecf5520501268aa1964995d9dbbe72a43f59f11a2109e0db6f35b","sha512":"9fc59c6e9534489aa5b36afbc65864d54be8a4229e410b711c844442926ca14db270450aea155188da46842d5c07ac47cbc0bd03cef7f025a750c0818759aa82","ssdeep":"49152:wYLFNhhNKhiIdnukBGbJUV/8RaWU4nCNXdw5DhWBUZ8Ket+1VEQxv:BLv/4lBGFUVPWvAX+5gUj2+M4v","tlshash":"adf5c35c365af340915ad0e7e43b3c49d26ae189a40b00d07f7187f31eb574ae7aee26","size":3556854,"data":"","first_seen":"2025-05-27T11:48:18.864037Z","last_seen":"2026-07-17T17:41:48.679914Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/app.81d35db4.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd064f9db294e65155359353735833a","sha1":"552cfe54dff8bd5b9d0965686795fe42274f4d54","sha256":"aa1c00bafda43758a7c15cc3a3123b7fb26c5ca9e5eb31b926bd8158d48157f5","sha512":"083247e43f6a48d325cabb575a2dd035a5d2adde78ddf0d1ff7768f47f1b8564099cda864690aebed0f9407718501673925b1768674b0e1de06752c73a6d6cc1","ssdeep":"49152:kNyf5Ycbf8Ob4h9kMU9ZEP9mtEtD9H9aTpFC+AXeNB91ay7KwBZ8XfHthdFEPWog:SuotD9H9aTpFDAXerHaEKwBZ8Xr","tlshash":"16959eaf5be977fc0c545646b04f3a75629c1c7afb96e0e008ecd62922e5d80c213f69","size":1894532,"data":"","first_seen":"2025-12-21T03:27:03.705028Z","last_seen":"2026-02-23T13:10:20.934291Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/chunk-10674d48.513d76f5.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a300d170e83923946b08060a852227","sha1":"fc706b8c3dcfec0cc8f2a4577a8140e67ae6428d","sha256":"3b66fe00afa2d6de74cc38d5fb54f36603e3871a3b58cd573c3e092b6315bde6","sha512":"eb911f875041fb7b7dc2a8cbd391e35d93796bb2172a8e67fe93f42fe8de00b5777fcfca90e634be2c0123bf100a088c389b26ee12e1ee874a5cf5e4ffdfdc2d","ssdeep":"192:m6Cje9JGsHRq+uCmYKDgHKxgXmunpFMOOGKkB9Oj6hBBg/BAAKsYllZ:ueHGsHRqALqCXmwpD86hX6569","tlshash":"6a5295a6c070a0fe4959c2b12045e5f0fb752a6ce112154afa7cec9b769d818333e77e","size":14260,"data":"","first_seen":"2025-10-04T09:42:35.222711Z","last_seen":"2026-07-17T17:41:48.641649Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/chunk-0c8799c7.38d11547.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec04325d46f92f0616ddfbe92f181096","sha1":"e4ae95357e47671dd1ad6f488278ad4257562e9b","sha256":"f4ae88da37b25af414e66e64583d516a02ad7a18ddb55a15bf7823930bd72d59","sha512":"40259869ae929e6a5470645939e926439eeed21a71faf4e89a41070bd11fc7fa26cdebc27fff48e2c5baa549aaaf026268ec2e3ee84737d9f5557d32efa704ce","ssdeep":"768:INNV0wlXGn9M+/NYo9tEcXh+PflPE9iksO9s1:BwlXGnD/NYokg+3l0iRN","tlshash":"cef22806a097b8bc8d579156341a3335b8252f98c425c8c7f638dca8a5e8e7c372f76c","size":37488,"data":"","first_seen":"2025-11-22T13:30:31.060503Z","last_seen":"2026-02-23T13:10:20.836807Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20191\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFB1E8233132D3BC4C\r\naccept-ranges: bytes\r\netag: \"D88AE54A30FED8843621233E2C13698C\"\r\nlast-modified: Tue, 04 Mar 2025 11:31:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10317379111668275130\r\nx-oss-storage-class: Standard\r\ncontent-md5: 2IrlSjD+2IQ2ISM+LBNpjA==\r\nx-oss-server-time: 37\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZp%2FLcRPLjrUn%2B%2Bcd%2FRq7CXGjMQHNLsPsCQREbdgQpBLgJY%2Buf118VJ91rfIzoF6QA0hCo6b0cW2N2l5E7fM8UDgdPqxQeP647YnibKjkQcMd%2F%2FceHvVZlAh\"}]}\r\ncf-ray: 9b7e4ed978f60b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-12T05:09:18.256416Z","times_seen":9886,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96012\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 69540F5BBC6A5B303847D448\r\naccept-ranges: bytes\r\netag: \"A7D470FBE103FB9A6784C6E3BD450CCC\"\r\nlast-modified: Tue, 04 Mar 2025 13:29:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17426815373976793898\r\nx-oss-storage-class: Standard\r\ncontent-md5: p9Rw++ED+5pnhMbjvUUMzA==\r\nx-oss-server-time: 54\r\nage: 282756\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfuh6lO43gnLbegtuTUxn%2FpeeOrBIB94gzdZezVgAq0YB3W3MmfLx8kOSdmXxEMKDFbwWEp7m6y%2BCIBQ7YgsuW9O5OAzY47kOGqj33vvbUgHU%2FeCZOEyWnhQ\"}]}\r\ncf-ray: 9b7e4ed978f70b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":96012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-12T05:09:18.313765Z","times_seen":9656,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/4dc50fe8-f31f-437e-b402-6f5b0f077130.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/4dc50fe8-f31f-437e-b402-6f5b0f077130.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17909\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F0ACF6C531388ED480\r\naccept-ranges: bytes\r\netag: \"FBA6C31B82250CA9F25F31B562CAFA4F\"\r\nlast-modified: Mon, 03 Mar 2025 02:27:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3433245905249550157\r\nx-oss-storage-class: Standard\r\ncontent-md5: +6bDG4IlDKnyXzG1Ysr6Tw==\r\nx-oss-server-time: 22\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F1B5Ce26UKNfEPPqa%2BNU39ZYZmQVheEf1lzHnw150yObnTp8W1esSTiAFp8TPfdZ%2FEdsNQt%2FZ6aYaUYE9jSVtr74e%2BvhfBPUYUFh3tk1XMAFGa5lllwaUc4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee72cd456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17909,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 403x1300, components 3","md5":"fba6c31b82250ca9f25f31b562cafa4f","sha1":"03c998a703fad56eeb73bf5dcdb9b1391cfb4930","sha256":"53faf32fb7183672442bf2eeb36c3a27a18ed5817d90d2ffce31f94d3eb39f4a","sha512":"6c69169c01a0aba3cfd9fe76e13ef671d2179a7df48dff477471cf6e617815deabdf0432b5d6c947af5af37889874a40b8b33a94a23442047a546bc8781602e4","ssdeep":"384:1fAt2EC86gjyZ/rS9TCbkjIPIlFWIdqtrm6lyP0CJn:1onCuOZrVkKIlFWq4DAcc","tlshash":"8382e01ffb624625e3321cb2943897175213e7e476a82ab3333663795e00347afd902e","first_seen":"2025-04-09T12:05:43.88362Z","last_seen":"2026-06-01T04:12:49.443718Z","times_seen":227,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/msg-icon.f8cdbed7.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/msg-icon.f8cdbed7.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"588-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nx-cache: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":588,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8cdbed74cd46c6724800df01204b1e6","sha1":"6186c0c1125f1115f0dc244d49f4a11ff44c9d9a","sha256":"d1c9e38df374cad7e3c176c2cb7661cc4b1d2565ed8c814103ec0f74da6e70d7","sha512":"c8b06beefec1471660f8a795151e5d4d528600fc204411dee2498b0e4ecca99b6108452f76d3010ad357699152a0ec5cd683be20ff655b32ecff2409489052d0","ssdeep":"","tlshash":"4ff0be38df4c16fd8997c3588f2bb41a078cf3a2b0bc4078a9ad54b5a443adae473494","first_seen":"2025-04-18T11:31:53.047327Z","last_seen":"2026-08-08T10:48:35.73299Z","times_seen":637,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b4.fa29d1f8.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b4.fa29d1f8.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"41257-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41257,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 881 x 322, 8-bit colormap, non-interlaced","md5":"fa29d1f8c15638f3eac9310627392827","sha1":"9389b119682f620fe0b43b2e772e5b32f79215bc","sha256":"04fae1e29d5f864145911f14a77dfc807a7e2f324715a736f8f9bb373daef8d9","sha512":"fe1e2ea2c0df570d9b0d332934f7dc4b123234866da3ba847d09fab89046ac51589bc06d0f82b583e907e57e2ae8f3e7607578f52931e4ffaebc14045b0da0fc","ssdeep":"768:4xyG+H8/1Umwy5bD/ZFnIEoDp5Pqt85XAgJsebzBcV4ohTKfxgjfazv:VGe8bZ2PqwL2MeV4oV66jS","tlshash":"560302b9aac496dc58b44d705ae30e1e73f031da680a3f4eb53546329b0ae2c41df8e4","first_seen":"2025-01-14T11:35:46.504534Z","last_seen":"2026-07-31T22:21:48.352618Z","times_seen":530,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83223,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dc371151f2a2c9248846f42611208de8","sha1":"a35fffcdda38269cf33f9cbc988b2b2665d0755f","sha256":"e35ae47bc6268bd7f5811ebdc75b558f9ab44adc3e0e06ca6b1586b1ace49e8f","sha512":"508822b649cbb450d0786ba09a0eb3883b810857f44ed05653bd24f7eb9563a938587cc367f172ac0bbf3f2ef62ec21aec9d3ec333ae17a7e39d9f32d8757c83","ssdeep":"768:n18wpoNWcjFjc0TQVt+uduUbnsMmX6nVuN7sxykjOEDXzg9x1fl74BwzVI9Ylfbj:ncFjFjcOknaOsQDGzf55YM7cJOPGz0","tlshash":"72839422c79481360b2840e94c573b1b9e9d438aeb335f95c72c9f7c3dac0e67a5a49d","first_seen":"2026-01-03T00:17:22.254515Z","last_seen":"2026-01-03T06:39:42.884246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 180465\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFACF6C53138AAD380\r\naccept-ranges: bytes\r\netag: \"60E10D77EBE5877FC1C9385748E2CF72\"\r\nlast-modified: Mon, 03 Mar 2025 18:12:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6239118004522713692\r\nx-oss-storage-class: Standard\r\ncontent-md5: YOENd+vlh3/ByThXSOLPcg==\r\nx-oss-server-time: 1\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02Jv6aPvvQSmOvV3NQhDetJszOpzL2ER5DWvrQq02%2BZwpmB2mOR%2BiTqrFU8mn71mQB%2BG%2BBhBD7gHfx2Mqde7w7jOf5lC4zWG5jg7e90bUUby19JyTu09nlZh\"}]}\r\ncf-ray: 9b7e4ed978dd0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":180465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-08-12T05:09:18.329504Z","times_seen":9690,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":16,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/css/chunk-10674d48.e0aedc02.css","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/css/chunk-10674d48.e0aedc02.css HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"10801-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10801,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10801), with no line terminators","md5":"dca19621babafd0a9953ef80c4e53f34","sha1":"e9b990155312e7fd0e8a61268689e19f88aa3032","sha256":"1cbdeac1e98e02ab497d262cabf945e8d14b09f4ce21b0b9e5d4b6587ad4d13a","sha512":"67e2d7af71a2f9eb7d81879af3cba52097b50e2976474e0778e71894e54c2fc0084168810766a2875242902a7187703c754a6efa7615c66c672259d11c9df323","ssdeep":"96:VWpFMSudVJViM8CHFi0ANOAvwmkZDZTo3oYNoSwMtmKbBGgD6:VWjMSuPTiM8CH8vw/xyf8YhBGgW","tlshash":"5f22bae9e5f8101b743ba2b7958305d87e40bd1ba2bec245fb44b010ed7a5421bfa25f","first_seen":"2025-10-04T09:42:35.27645Z","last_seen":"2026-07-17T17:41:48.610097Z","times_seen":393,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/chunk-0c8799c7.38d11547.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/js/chunk-0c8799c7.38d11547.js HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"37488-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37488,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37204), with no line terminators","md5":"ec04325d46f92f0616ddfbe92f181096","sha1":"e4ae95357e47671dd1ad6f488278ad4257562e9b","sha256":"f4ae88da37b25af414e66e64583d516a02ad7a18ddb55a15bf7823930bd72d59","sha512":"40259869ae929e6a5470645939e926439eeed21a71faf4e89a41070bd11fc7fa26cdebc27fff48e2c5baa549aaaf026268ec2e3ee84737d9f5557d32efa704ce","ssdeep":"768:INNV0wlXGn9M+/NYo9tEcXh+PflPE9iksO9s1:BwlXGnD/NYokg+3l0iRN","tlshash":"cef22806a097b8bc8d579156341a3335b8252f98c425c8c7f638dca8a5e8e7c372f76c","first_seen":"2025-11-22T13:30:31.060503Z","last_seen":"2026-02-23T13:10:20.836807Z","times_seen":208,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-12T05:09:18.379805Z","times_seen":7386,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B0106BGTHK/81zb7kDasbL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B0106BGTHK/81zb7kDasbL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 439337\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F293A7E93138EA7F51\r\naccept-ranges: bytes\r\netag: \"AECC0BCAA1AE8DB771D78607F482FF9A\"\r\nlast-modified: Tue, 04 Mar 2025 09:02:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5338529444683243919\r\nx-oss-storage-class: Standard\r\ncontent-md5: rswLyqGujbdx14YH9IL/mg==\r\nx-oss-server-time: 15\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tjt72YmzgEIZFDZDOGVHeER%2FMfc5m%2FTh9SQfoRuWlCoyEddLPDl7C20Ga79QQeACtRoa9UjzYkF6hQzRp%2F9W0I9fgeprp7M8rxQMtvisR4W9kYncos%2BTCGhu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee88ce456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":439337,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1054, components 3","md5":"aecc0bcaa1ae8db771d78607f482ff9a","sha1":"9e9987b14fd337d914f3447689ee96444cb53509","sha256":"fcca3a946839ebe2512070401e6f7e3f311858e0817b7820ce03ba7c2b251e23","sha512":"4c9bb5cd8d4272abd725c72030122b4618cddf31d21e33250a5d16ad6e8e93b6ab4dc37b64b47991784a75e367885fa23dc428c8a108d9f5d26eb35d9b20cd3c","ssdeep":"6144:xJs8rt3y4eYBd1frcgTyKtOCKyNd2xbyBjRpqEwjVIajcE5i+cyNG+laNSH8CO:PsOtcmrHyEOwN1lpqRprcyNG+c4H8n","tlshash":"089423872fdebd11e401837fa5cd878cc6fd9aeeb865c87435b187b49ba130ab418950","first_seen":"2024-11-28T13:33:20.835958Z","last_seen":"2026-06-01T04:12:49.48591Z","times_seen":250,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B09217QFS2/615d%252BVzr0nL._AC_UL1200_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B09217QFS2/615d%252BVzr0nL._AC_UL1200_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86179\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3C78BAF34304AA4DE\r\naccept-ranges: bytes\r\netag: \"8CCD1168091D4636E7AD5B323BEC0B18\"\r\nlast-modified: Sun, 02 Mar 2025 15:44:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15219819389473954255\r\nx-oss-storage-class: Standard\r\ncontent-md5: jM0RaAkdRjbnrVsyO+wLGA==\r\nx-oss-server-time: 49\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2pDRHd1LNZR6hZVJhkR8kL7iHMaMuxENl28HJ20ttCW2vRdIet0DQWfHSlrgfLX5z5s786UHaQnETh4oAAtLS2VX%2FFpKHFEq2LtcRAKq7Ng%2Ft3pBVzzIm82\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef53d4e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":86179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x822, components 3","md5":"8ccd1168091d4636e7ad5b323bec0b18","sha1":"dc02aaec8f8e632f308790a317ceb5e701947763","sha256":"c4e54243caf8970ed3610be264915a817cf3fc8be0884b1369613cd39c3ff2ed","sha512":"75ed40fbc82cc5abe3b6ed52d5b2fd75ae89bf63865dc83a1f3ae9777273b15a3436a22f3b25d4d43cfd886f216c97635339f28ee5f92d75bd53895cd22e88c5","ssdeep":"1536:c6xrqWOPvm5t2WuIFG37rsVoq/sY/Tlqlgk/1OPbvJSap2g0rx:AWQvmb25IketrBqlgkEP7Jqrx","tlshash":"0b83028e30205cf9dbaff3a7e985b2de1a8505b70655ee7040835a2efa681f03a55d81","first_seen":"2024-11-28T13:33:20.884111Z","last_seen":"2026-06-01T04:12:49.421697Z","times_seen":250,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/1527d380-5254-4ca1-887c-129b99e96de3.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/1527d380-5254-4ca1-887c-129b99e96de3.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41171\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4AFAD5B36366C99CF\r\naccept-ranges: bytes\r\netag: \"F009C74CB001E9B0A7572404B15DFA23\"\r\nlast-modified: Tue, 04 Mar 2025 13:40:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 474375744009280902\r\nx-oss-storage-class: Standard\r\ncontent-md5: 8AnHTLAB6bCnVyQEsV36Iw==\r\nx-oss-server-time: 65\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYmUQ%2BIeK5FoZU0MAIcquNIS%2BO61BGrO6XRMAPVtLr1e9smSXSzUfHBaHcRbUZYcCJakYyV0m87AFWN3NpdIJLXhQ8cm9f9hqpqyf6zeuneiv%2BrA6%2F1k1q8N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef56d5756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41171,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 606x1500, components 3","md5":"f009c74cb001e9b0a7572404b15dfa23","sha1":"4ae2b3b4bc504bf8dbc1400baffca0196b58be98","sha256":"a44bfc5c3ed2c3587e312ea88aa1a3da39ede97ff39cf784ed8c924914c2fc67","sha512":"99b0cba2a9aa9bc0bfce3401ee9a9e86cfb54c8781198c79aa974b50d09aa4bcc6e2043bc575457431219ae3ee15a6a88eda2f64c78ebfc6436b51eb543dbd80","ssdeep":"768:1/kd/kXeCiQrmTEiYFKencoNHLjnna9Ve/jjLy5U2K33xi2vcr8VKGKho6:k/kXetQSklzNrja9A/jjLYU2KnoELKh9","tlshash":"2603f1860b06c0c5f776da7064c956737d8a76fee31c4fe2286e719411e8ae001b2b9b","first_seen":"2024-11-28T13:33:20.904481Z","last_seen":"2026-06-01T04:12:49.461216Z","times_seen":251,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T00:16:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:28 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"10337-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10337,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7358)","md5":"afdf06c904ae342092e33a84492af37a","sha1":"61e22b1bb40d22d8cb24b291aaaf9d03b24f6c45","sha256":"2218e3ee10acc3b9068fec3e8fd55b415ad6c6a76e26f53f4bc2ac508cfd1272","sha512":"9fa332ac4d977f7ca5bb28a3f3d050889ccfb98e63d8397822d914e33a6da8365651882ceb5e588eef5e3964c8d5104f9729cf68eca965b572b166813b41c674","ssdeep":"192:2enV9fxbcufJt2vDYbNVNt4wM/tA9Fdv+tk33EUjg9QxW4iH3o+kbDkKJ/ExY99x:rpft2M3pYE42","tlshash":"3922f671c450919f6c30cf3bbba87b5ac2db6a690830d87095ad5f1ee6a4bc48363583","first_seen":"2025-12-21T03:27:03.634097Z","last_seen":"2026-02-23T13:10:20.869691Z","times_seen":156,"resource_available":false,"data":null}},"time_used":2902,"timings":{"blocked":1284,"dns":826,"connect":224,"send":0,"wait":330,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/deals_bg.4b412301.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/deals_bg.4b412301.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.pzfdyx.com/start/css/chunk-0c8799c7.63f45ac6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"190349-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1531 x 500, 8-bit colormap, non-interlaced","md5":"4b41230138851e7438d62020eb57ca58","sha1":"4e5ddba222016bd26262fb00dcdf146803abf939","sha256":"6ce60bb0932af95ee66857b0f9d3a952821493fca164b8849f3f3c508cb74e7b","sha512":"2e0a9d5e2a2ff5a02ad9a7f711ee8c6a13923dc7a68a343ef59b9ea6be0e17425ac9fd19838bf24e871acdbb8aac4a7dcf273f5c5c2f8abc0945237b0ff44305","ssdeep":"3072:MW0BS3s8rHA8qBbAMLXKaEIilaMpJga6wn1SSbUqOAx1cszNp41x33txTER:v0A8uHhqBbAc6aOagJgg1Sg1tN0Xy","tlshash":"5814234440026d5eeb9bf222ce7cd7563e498104f1ad741a5eae6e3c3fdc9c66124aa3","first_seen":"2025-01-14T11:35:46.505346Z","last_seen":"2026-07-17T17:41:48.610677Z","times_seen":499,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com//a0ea308e-6e34-4812-bc23-f6d8f70c87ff.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET //a0ea308e-6e34-4812-bc23-f6d8f70c87ff.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 485483\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF68F5793333CDB74B\r\naccept-ranges: bytes\r\netag: \"2CA780D40E8C626D7BF997559B877E42\"\r\nlast-modified: Fri, 29 Aug 2025 07:59:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7845088589628211448\r\nx-oss-storage-class: Standard\r\ncontent-md5: LKeA1A6MYm17+ZdVm4d+Qg==\r\nx-oss-server-time: 30\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b58Q%2FexgSata4S4QugP%2Bhyj%2FOd3Enww7ZSzTnt%2BB33%2BKv37bfMR%2B1MGwaSooEdW9m2t3Imi9twQ3otHBpDdXAsKQ2BMe2g3qh9YkLlau%2BhiYM46p%2BbZafMeT\"}]}\r\ncf-ray: 9b7e4ed978f40b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1914 x 574, 8-bit/color RGBA, non-interlaced","md5":"2ca780d40e8c626d7bf997559b877e42","sha1":"ab5626d3f9f4598b7f9eb90915cfd01ea4202bf8","sha256":"ea9f6719de36bb54bfe81ea8447029b7fd705448d4c89e73ff2f89a64d60c327","sha512":"3b3a356fc01fe2191db32a483eb35b19176f579afca61594d7952078a4bc5b6999ce1a3ecba0b186d966b2b3a073bf1beac64ec5a17a6e12a98caa62ff3b6d6b","ssdeep":"12288:qDrG2xXUQMtcw5j6VdFwHNK0cR0EChx3O1:qTpUsw54d6NoR0Ew3O1","tlshash":"baa423e4c7beb138358bc97fc2f96fc3d4823570cada4a45b5d6612d2709724621398b","first_seen":"2025-09-11T08:44:21.780932Z","last_seen":"2026-07-17T17:41:48.61522Z","times_seen":427,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":91,"dns":26,"connect":4,"send":0,"wait":18,"receive":55,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07RQQ8GKL/71oowcU2d%252BL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07RQQ8GKL/71oowcU2d%252BL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 228683\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F093A7E932303F7F51\r\naccept-ranges: bytes\r\netag: \"F53D1C6DC328F9E77EEB83F4C3A11372\"\r\nlast-modified: Sun, 02 Mar 2025 15:25:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10199109123162639696\r\nx-oss-storage-class: Standard\r\ncontent-md5: 9T0cbcMo+ed+64P0w6ETcg==\r\nx-oss-server-time: 31\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2Br52PB9eRPeJ8rE4f8fURzSZ%2BRTxtDzu1F1Yi%2Bye8aAOYEpS%2BrneHSwaz0NOg1E%2BxZbTGDHAbGW3x8j29VWxJ50jN2NainxlcM8SLjfc6bbQPUbDWCBIPcu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee71ccf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":228683,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 936x1500, components 3","md5":"f53d1c6dc328f9e77eeb83f4c3a11372","sha1":"358e2692f64277f776688fd93a03938b10c0ea2e","sha256":"3485e49bcf1d2e17665be12997c4da111ee0fa31586c3c534ed82859dd45a454","sha512":"c95a2be2f8562462f68f65a959c3c9ad5aaca3ffcdb4594e6c008c7cc22f5c6a982ecd6c969a749064068530ab39c1c020373301d967e62188d01d0fe1600b6d","ssdeep":"6144:kchVUri1Y7OD4mfY7+bDVmRM5CPKuHrJk3:kte1YqD4aDV4MQSutc","tlshash":"9a24233eaf7586ebc1e061b6a7032b8476b4fe76d56498e0886c52c313b6f9170cf650","first_seen":"2025-03-28T23:30:12.889514Z","last_seen":"2026-06-01T04:12:49.48754Z","times_seen":226,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B08NTS2NDV/616iv4vC-bL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B08NTS2NDV/616iv4vC-bL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110627\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2AB67323337CDBD5E\r\naccept-ranges: bytes\r\netag: \"8AFF0778E578CF01AF766940E98C2F3D\"\r\nlast-modified: Thu, 06 Mar 2025 11:23:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2282667434131950973\r\nx-oss-storage-class: Standard\r\ncontent-md5: iv8HeOV4zwGvdmlA6YwvPQ==\r\nx-oss-server-time: 13\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8Gb7ahMPzS1K4gpWLg8j49QcSt8sx8hKz7UPhuRs9wpP0X5YoAX0NmYMGjHcD7ugEdKzq7JHQt%2FNXbKm4K7ZIYlQG5PZ7Q%2BdD08KUalXMOuqSBXhs%2BqLMBn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee86ce156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":110627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1050x1500, components 3","md5":"8aff0778e578cf01af766940e98c2f3d","sha1":"b72b8b93fbc2b265df53254a3d9147536970d2eb","sha256":"9e4dee3b5110e4b927ce4f196571edc37c5021c4b455db3cc5f383ec72f72cc9","sha512":"0d0f76da97ed14a5013c1dca1ae6c7e7c926dcd3f13fbf60fa530c58485756d2aefac1e237cf9c45b0adf7e1c4c4c4abf7182bb8429c2faaeed9b2b63b7fa8f1","ssdeep":"3072:hP2fLKEFa7lA0/XtjlUcOYjIEqFomJdx5jlemuGZM:hP2zn0/dhDOYjIEJmjx5jlejGZM","tlshash":"69b312523681f0a9e09f1c74a0f62b54e2edabf4f2990158515b2feac8603d35f643b3","first_seen":"2024-11-28T13:33:20.814669Z","last_seen":"2026-06-01T04:12:49.423397Z","times_seen":250,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/b1e85300-e068-45a8-86d5-5d578ed43ee7.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/b1e85300-e068-45a8-86d5-5d578ed43ee7.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72589\r\npriority: u=4,i=?0\r\nx-oss-request-id: 69540F60794D103638F05711\r\naccept-ranges: bytes\r\netag: \"92D6EF34A10C5435513F13FCDF061FC1\"\r\nlast-modified: Tue, 04 Mar 2025 04:07:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5568800700809130011\r\nx-oss-storage-class: Standard\r\ncontent-md5: ktbvNKEMVDVRPxP83wYfwQ==\r\nx-oss-server-time: 8\r\nage: 282754\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cclWdK59tSx1AIyGGXswxlYIxGjbW2Etl8u7RMx1DSqfJtn7Ess3yroUEXTi%2FuvS8tv6EPKKTFHQ0xJl4PsJ564LWF6Xoex%2BxBRb2TDzeuGV%2FY0IxM39DNFj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee89ce656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":72589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1220x1220, components 3","md5":"92d6ef34a10c5435513f13fcdf061fc1","sha1":"e9da8a0febbbada3e0a42d5302fe23bc709c71f6","sha256":"4fa02e62202c936f8bd9b6e9017568931668242ea0df4f731f36ab4e529169fc","sha512":"f0591ef78cb77f297dbc50859dd0320e29e4fae427309fae00cb5a0954c0ad5b8ac9a66346afac160b8c3b327d96374c9fd3f8db7fc562d5c27cde5c332d5aae","ssdeep":"1536:NHsJbtLMn5+gzI71jA2gzcRMYFrwEySd8DxAp8IZH5o3zHO:loZLX/gEJGSd89hIZgzu","tlshash":"8063d023a7f9d023ff4e35392c53193d56cc2c6cbd262f6079376508dee6a43a0a6949","first_seen":"2024-11-28T13:33:20.770396Z","last_seen":"2026-06-01T04:12:49.426838Z","times_seen":250,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/index!download-url.action?lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ee9b70c9443f70379ec2bc27c2ed3e84","sha1":"98f6d951971e74a017b0aeaa15d9645f4b2efb13","sha256":"78519e6fce32195a8ef66068c10588149971771c1ca335b86260786c804f3245","sha512":"162eac4f0326e48dd25c201518b94efad1751cb9b258ca7cb918b760e50c353c3a4fed66c020da9f07b5b1c0e7b298df701e43c64d7bed839df38ce05968c0af","ssdeep":"","tlshash":"5e800000282e2c0b880320c8b88c3a8002ac23a308c0cb200e8cab3080ae2b22000830","first_seen":"2024-09-26T14:29:38Z","last_seen":"2026-08-02T20:19:22.188498Z","times_seen":1924,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39527\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFCE63A83533EA094D\r\naccept-ranges: bytes\r\netag: \"46155632D481869CB9C3E853C7832BEA\"\r\nlast-modified: Mon, 03 Mar 2025 08:22:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9572829594530076730\r\nx-oss-storage-class: Standard\r\ncontent-md5: RhVWMtSBhpy5w+hTx4Mr6g==\r\nx-oss-server-time: 22\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WwlCzBHAKVW6ct6eIq%2BurX3M4aNdO7ygiAEBPBVALHjkRjFEONDB7xM6VbrlkI2g4m1586zwQTr4rZnLCfT6skw3azCOF97uOYlA5%2BaMgFtBAARELxndZqL\"}]}\r\ncf-ray: 9b7e4ed978e10b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.347309Z","times_seen":9984,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":19,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-11-24/7a5e2a60-70d4-42ca-ad7d-9131338a145c.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-11-24/7a5e2a60-70d4-42ca-ad7d-9131338a145c.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33666\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB4B813830C5CFDE\r\naccept-ranges: bytes\r\netag: \"BF68896C674DD1D1AE3026FCE45DEFE7\"\r\nlast-modified: Sat, 22 Mar 2025 13:43:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18023131332695019984\r\nx-oss-storage-class: Standard\r\ncontent-md5: v2iJbGdN0dGuMCb85F3v5w==\r\nx-oss-server-time: 90\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIs8kyfYTvQL2RMC2OMAbtwiIUQCsOc6ufmupFOrNv4NPUJH43wnpeAG1%2BB1MFmT5O5XJZXJTxW95TRsp6e%2BAX3wsaGijmKuRlft57l28NwMpFhxGgCWFMoc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4ccaa56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 833x667, components 3","md5":"bf68896c674dd1d1ae3026fce45defe7","sha1":"93d395826fbca02f9765bdbe1864527f469923a3","sha256":"bf3702ec942782cc4ef19f50c2d027b85fc3b66d98725e97a7f88ccf634c1339","sha512":"532c8dbbf3c139119b0902cfc2b8ad68918ac673ad4acd7b72e69534212d3feb61f9263203ebcf9a2a46e8fde735bfc9394871638b13e374468d9d515fe63658","ssdeep":"768:we/LDluEBfp/GCYlYtdjVee82F3not75Xe8PTb2Sk8OQs://LDlpBpuCYl255OLX2SkjQs","tlshash":"85e2e1c68748b594fc8c277185d7c6422f109dba0b84852ce2e936937b5ef8927cc2db","first_seen":"2024-11-28T13:33:20.826979Z","last_seen":"2026-06-01T04:12:49.403129Z","times_seen":225,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/07c90999-9ac9-4814-9852-a73850850494.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/07c90999-9ac9-4814-9852-a73850850494.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40033\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F16AFD363735736AA4\r\naccept-ranges: bytes\r\netag: \"02AB021B9D88CDF9FEAE58064ECB158F\"\r\nlast-modified: Sat, 22 Mar 2025 13:38:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10754247573245267532\r\nx-oss-storage-class: Standard\r\ncontent-md5: AqsCG52Izfn+rlgGTssVjw==\r\nx-oss-server-time: 14\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5nv5QzGcICN3H4VMjbJiidQMXVsOpMgPNA8093N30BQAeZiA7uhOBeLnBgbpCBmLHmyhPTa1LrZSS7W4axPQSbI4MLXe70w9Qm7R6jlYzQ%2FPpw1etot%2B1EI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4ccab56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 400x400, components 3","md5":"02ab021b9d88cdf9feae58064ecb158f","sha1":"45c9945fc3c1e70a8418798cbc88804d684ca36d","sha256":"1eb7c6dba2a4275e467c81d2fe54b11200c7e76320045f1b8e770c17c7329644","sha512":"566ece992212da224bbc5fa1159edabe55d4f370833ecd1dc76982093b2efd08da29df07157cf87cb22934f82534bd789b5e304fb2936187f1e8c9f1a4e27bed","ssdeep":"768:jw8Wj21M9tyRVFLQU5e5Dst0Q/fiFeRfbt4M6c3E9Q8vEthfnOTB44:jwhjK2yuUA5S5KFev4M+28vEthfmB5","tlshash":"1003f1d3da6ac5dc62bd1bb4d1dd1a6dde02ff8d8d0ed4202be003a2618e4704f95e16","first_seen":"2024-11-28T13:33:20.876407Z","last_seen":"2026-06-01T04:12:49.410077Z","times_seen":291,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B01N8UTU93/41wGLO5QWYL._AC_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B01N8UTU93/41wGLO5QWYL._AC_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17444\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F17CD23C333404D3A0\r\naccept-ranges: bytes\r\netag: \"E48553E7D42F9E265B9C7B7F8CA6F7FC\"\r\nlast-modified: Sun, 02 Mar 2025 17:57:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12447556605378327238\r\nx-oss-storage-class: Standard\r\ncontent-md5: 5IVT59QvniZbnHt/jKb3/A==\r\nx-oss-server-time: 43\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRKiuscIOXIUKM9fUEAjZ7D72QTWlYPAA44%2FdtuZBvTIl%2B8t141TjRrTEpM9M50xK7Db3uR8T7eiH09lqN0urLO9wxdQkvuhGMEOnaV3G65Z3Q5Uu1LlvxpV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee75cda56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x593, components 3","md5":"e48553e7d42f9e265b9c7b7f8ca6f7fc","sha1":"67391d12d79fb706f6d7117028ef07b6531b0f2b","sha256":"02a190039b36f41825cf04134b749b98cea605998915a923f6ba93bf465172cb","sha512":"4ed2d015213e07632fe863a617e474b2137ef1d3866546a441b37638ffd40665ac359405011c35f7c1c5279178c1ea01b1b2378465fe8d3ef35359c1b28880d9","ssdeep":"384:19t+O8gMuTkyR3yVMT7scCV1IWD0Ah744itU9Djhbs:1PuLO3yVMT7FKtD0ANRisDjhbs","tlshash":"7c72e1a33616dac2f42b0e7c92ed490993092e85d409b787bcd00bcf3bea2d146b184c","first_seen":"2025-05-14T12:02:49.228453Z","last_seen":"2026-05-07T17:18:25.56817Z","times_seen":303,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B0917TQK9S/41vq3%252BkOXJL._AC_UL1000_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B0917TQK9S/41vq3%252BkOXJL._AC_UL1000_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52199\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F293A7E93139F87F51\r\naccept-ranges: bytes\r\netag: \"3F67C28B2C18AB73A493F028CA3E33FC\"\r\nlast-modified: Tue, 04 Mar 2025 23:43:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 129760625740502430\r\nx-oss-storage-class: Standard\r\ncontent-md5: P2fCiywYq3Okk/Aoyj4z/A==\r\nx-oss-server-time: 43\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuHTj1JK%2BmUnI%2BvuBgIj22%2FALM4CFUcMp0VJoMiH3Z%2FqBgRaYtDf6jYkg%2FGKUyYE7nRPpVaDIKqSmOnB9nkverD1Z5TougBWlBRaquAHz%2F7HGcqMZJ5uBj4G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee87ce256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 907x1000, components 3","md5":"3f67c28b2c18ab73a493f028ca3e33fc","sha1":"964cb522076fc889a55b4ffe6310b0cc171c9024","sha256":"c72e752aa9325e49b0ae5874e73401dff20cddbee518fb83e42a31cb4561304b","sha512":"ee5bb1e0446036a1a317225505ea84d69272abebe4b86f69754b1257740f8fb82c76fd02e4915ed15fb7526fc6f1aadede8e4c7b15c120e06d208f86cf0be111","ssdeep":"768:tIx8FhpkCRuAxd4ZA1wE3n8hJ96279+tBq1gqKgOKEDZQaG/aWRPoA:tI2xd4ZA5m61tB+KgCQRlPt","tlshash":"be33017887db6528d9706033a2454c19bf06e86c0286771c65931faef2297d9bf1fe38","first_seen":"2024-11-28T13:33:20.783004Z","last_seen":"2026-06-01T04:12:49.445117Z","times_seen":250,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B098T86DZQ/81x3T0gE50L._AC_SL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B098T86DZQ/81x3T0gE50L._AC_SL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 283848\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4AB4B81353569D1DE\r\naccept-ranges: bytes\r\netag: \"8D301A5DFFAF4848FE6E195F438BDAEA\"\r\nlast-modified: Mon, 03 Mar 2025 18:50:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7485449760479733730\r\nx-oss-storage-class: Standard\r\ncontent-md5: jTAaXf+vSEj+bhlfQ4va6g==\r\nx-oss-server-time: 46\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMVxtA7qOdLf%2F6C3W54ed63HHXCxXOf%2BJ2Uv%2FjFV9q9OzNnpWzyo%2BYBNku3KcqKXa0Is0d9IwxCqCTfu4GolgCOV8xvsXIgJHQepl9HcICnseTwWtVa9O8ts\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef51d4c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":283848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1283x1500, components 3","md5":"8d301a5dffaf4848fe6e195f438bdaea","sha1":"222f4b1679e7dc9460c03fb2755b9e89cdc83877","sha256":"7324025b2b168637b4962f4aff3301d6e9325fd4e20e9627b02d4f9080b41ac8","sha512":"0615754fb06d74c6c453c4fe576d4c3be8a76517dec349861933736b9fcbfbc408c3397cfbc6d0226b9d622198337a4d63b7bcbb23065045cef78f121688c0fd","ssdeep":"6144:qBj1vRbqkD14Eoh7sn0nOGHMaSQEc201T6Cvmxmlp:qV1JbJDWh4cJzDTVmxsp","tlshash":"635423db12b02a9ed5ebb23204651390df0fad9137a0a9aba084fd203417cfbdd81971","first_seen":"2024-08-19T21:40:59.173157Z","last_seen":"2026-06-01T04:12:49.474656Z","times_seen":300,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B0CBLGBY1N/412-mhQ0NKL._AC_SL1000_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B0CBLGBY1N/412-mhQ0NKL._AC_SL1000_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24478\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F46AFD3638346B6CA4\r\naccept-ranges: bytes\r\netag: \"22C971A81F7A147AB5E1F3511EEF84EF\"\r\nlast-modified: Tue, 04 Mar 2025 00:56:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8568576644885727740\r\nx-oss-storage-class: Standard\r\ncontent-md5: IslxqB96FHq14fNRHu+E7w==\r\nx-oss-server-time: 28\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oPeEhQa3pt8VMvBCDKgdVukjHvKtsyXWOgnNyfnAB%2FMJfAwcEbrwEdoOE9qJnOh0t4HNtY5JhXZckDqhCho0q1ZKjCWeV2H2BZDSAfS4LiZG5xigICFAjXX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef53d5056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 833x755, components 3","md5":"22c971a81f7a147ab5e1f3511eef84ef","sha1":"d390e955fcdecdb582d9b4d03e30108114cbae8b","sha256":"db67f739a666a43ef9692f9b02150bea3d977ed4e7faf94f9bb8ebbee2517839","sha512":"71a82c31cc6807ce7d2cde7f0bc60f8be5693f7c10cdcc92ee6217c8658da7ba94491c896def85d7d41761731b79c3471dd1b0b626f0bcd3bd5c8d1b75c0276e","ssdeep":"384:XjLw6d3dcTyMwJSBLnr0c8ieiQheZvidSkymuHYiokgWSzbCu0KKj8q7OOck9UcW:vNyTySLd89feZ2PyDHecuS/7O4pFI","tlshash":"d5b2e0e0d2f891b6ea12d4305153f35eda455d643b099307ae0e7a1abc786f01d9d0bc","first_seen":"2024-11-28T13:33:20.889832Z","last_seen":"2026-06-01T04:12:49.494899Z","times_seen":250,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/servicesMain.2eace8bc.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/servicesMain.2eace8bc.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"6163-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2eace8bc67de913afc80ffbf6b097b5a","sha1":"5eda1dbd38556c7c842ba66a370a99468113f5eb","sha256":"d5d47329deca3b134c80c9b6c59d7ab0217663c8cdaee9c25a0820fee61b6aa0","sha512":"4ad4d23f4c87a23071c73d37f34b046fe4f25b3f312252270a7609ea7608594a2e42a3f9c4a1eec9968f4616e62918c24976fbe90160e75d58ff5bd441fb2449","ssdeep":"96:x2BFX4x/LqAYPr093rwzjoEcenP6DTR1esHLV0IkmxyOFIKvsXbeHK14C8mVKk:o4d+AYwhwXRnP6DmsHpi+/9vkypDmD","tlshash":"70d17e8d13fc98165c1caf2620a51e3fff054a762603e5f61b2dc2494d6912cc7a9eee","first_seen":"2025-12-21T03:27:03.631963Z","last_seen":"2026-07-17T17:41:48.654771Z","times_seen":262,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"61ac163bbeb684523aeaa66caf6efc64","sha1":"c49a9f7247a34ec4c9e5f75ad21deb312b2fddd5","sha256":"2999b297980b24d7d0b2fb9f7245942a77df33163df540d618d63ae092c6f0a0","sha512":"d8c5b16c335a127695312497796baa41d5ed526b5266aff1b0c490574e4cdbc4136a56fcc4640f207268c18027da469522291cafe33ab0e3f2ce8cb89eb2faab","ssdeep":"","tlshash":"d0a012009c154c150c03c244a84d260641c8210246404e580d041928017d43c21000b0","first_seen":"2024-07-21T11:02:12Z","last_seen":"2026-08-12T05:09:18.246836Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40407\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFAB6732353428BC5E\r\naccept-ranges: bytes\r\netag: \"74CE2539C3D1D018EB92F94DD3B9BD23\"\r\nlast-modified: Tue, 04 Mar 2025 12:57:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14717827843339686010\r\nx-oss-storage-class: Standard\r\ncontent-md5: dM4lOcPR0BjrkvlN07m9Iw==\r\nx-oss-server-time: 14\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvyG1eIY%2BV9V7usy6LLDOf9NAB4C18QsaA6iZxykCsgYKF2ydSI01v5FwIDTjC0QE0uYQJS5obzUS1XzBpc77He%2B0kLy9V9SlFj5EL4IF8lZl4tCz8%2BlAUFo\"}]}\r\ncf-ray: 9b7e4ed978e40b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":40407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-12T05:09:18.358637Z","times_seen":9922,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/2f1d9bac-202f-463d-bdae-2d256868bead.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/2f1d9bac-202f-463d-bdae-2d256868bead.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188841\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1BC6A5B32357680A7\r\naccept-ranges: bytes\r\netag: \"AE14A7BB0D2543F11838D82232D52E92\"\r\nlast-modified: Mon, 03 Mar 2025 03:53:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11189561068998110805\r\nx-oss-storage-class: Standard\r\ncontent-md5: rhSnuw0lQ/EYONgiMtUukg==\r\nx-oss-server-time: 37\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V315n7kSPXGGxyNB6Mn4ABV%2Bhugi5cB3SCpHhlnH1TcMTkRHaBdIycSuhI8le2kFMnizMVLkQLll0aNmNus4gjimFwVL%2F%2F2CHPayotfdMO86wNI4JofXEBrD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee73cd556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":188841,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1267x1500, components 3","md5":"ae14a7bb0d2543f11838d82232d52e92","sha1":"3a2a01c649ff6ba663fde0d68444c5c2ccb6e148","sha256":"f98298d7bf548bf134b70deb4136ab14400dbd57e7834c91654084015705c744","sha512":"57b9071994071e9af585ef8881fd41e134817bc268625bd9abc1a49f8dff806515ce0fc80ef3e15527382863936f2fc264d40a528ed1819dfadce43ccc6c8704","ssdeep":"3072:8yciSMCiaSMhVMbdVqV4Hkakg14mTRiPKhxskeExof+dpQU:8NDflVTMZVVEa114oiPKhHeE2f+TQU","tlshash":"31041275e91ed994d135ebfda3cacc02ac4ecb5a02adcf63152bb3094d9e5d62601833","first_seen":"2025-05-14T12:02:49.111219Z","last_seen":"2026-06-01T04:12:49.439764Z","times_seen":224,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07GMSXZBM/71qkajNNh3L._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07GMSXZBM/71qkajNNh3L._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 146256\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3AB4B813732DCD0DE\r\naccept-ranges: bytes\r\netag: \"C3BFED22A153E18FC7A2390554A4CB19\"\r\nlast-modified: Sun, 02 Mar 2025 21:33:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14353005806519750135\r\nx-oss-storage-class: Standard\r\ncontent-md5: w7/tIqFT4Y/HojkFVKTLGQ==\r\nx-oss-server-time: 16\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3tEYm6Mu8P6c4HUUC9BMlVRDNUDObggxlOutErwie0h3VSglUGUQ1AQ9PPuU0ImsMz5QeoIZAlTNueLzMEOQp0nhsFpdTZ5GAHTNCumgHPLG44WTDh8G90c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef50d4a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 918x1500, components 3","md5":"c3bfed22a153e18fc7a2390554a4cb19","sha1":"d24bbb1676bd2bc73d646b368f590034e5ed62f6","sha256":"88db0fd4cbb74d23f610406157da65ca1a8a8631a8d0af45753a489e6065ed86","sha512":"e81c6ad9a06b8f2f4de8fd807a2a105b9aa11e9d9d9ef56f7f03d981633c5a6863a08cfa989e3ac8eaa95ec647120a9fed4b2b49c98d73fbc92c67aba2ff48ee","ssdeep":"3072:fs02TGG5Qj7YeHTQ6gtIlpplOBS9VgFeEED5G/UksmqH5N442hM:U02TB0q6gted9oeE+OUH52z+","tlshash":"56e312c64bd20bdad2ff0638c36813975682401e635fb9af7ff9d988aab300414d9575","first_seen":"2024-11-28T13:33:20.88189Z","last_seen":"2026-06-01T04:12:49.430827Z","times_seen":315,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B09TRBN757/81GfuP77L7L._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B09TRBN757/81GfuP77L7L._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 271195\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F468F579393818BB4B\r\naccept-ranges: bytes\r\netag: \"626B25EAE88667E3131F3763177618BD\"\r\nlast-modified: Thu, 06 Mar 2025 08:14:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6113099960207780079\r\nx-oss-storage-class: Standard\r\ncontent-md5: Ymsl6uiGZ+MTHzdjF3YYvQ==\r\nx-oss-server-time: 25\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Exq%2F8JD43f1kew1MqQ7c3qYGEmNPCOIr3BYDGOinWj%2FesXTlO822OwNIKON3Q0WjuwQZnpBCd%2FWZzRViJfVQGZG0OKpanVgTIFdBBb32nPmL6fFT%2FGzLZXTn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef56d5a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":271195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1444x1500, components 3","md5":"626b25eae88667e3131f3763177618bd","sha1":"211436e7bad7cf8eb4ab2d4e0770dee0ba39b5d4","sha256":"32185b2c855fb64c302c7d023a5946356d9db4ff17c952cd4a0a4819885f4c11","sha512":"c0cfb7fc0d83c3bb65cc63da4a717e9e326238a98f538bd815493b5c39f0e0b0ccab27fa43b7a79f272f275a33754f1c5961b609dfcbeda5c6f3d2809559ecb3","ssdeep":"6144:EkCYVSINoe1DMsZDqMm4AyzbBvJSKE45ySXLl4uI9sgvBset:3zrgfPyPBA8jXqXp","tlshash":"934423d04eaad947ec0b1537942b757ddb42098a7380768cbb730e9247af8a36e5d05c","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-06-01T04:12:49.515438Z","times_seen":253,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/ac0c221c-c825-46d0-aeab-7db6b335cba6.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/ac0c221c-c825-46d0-aeab-7db6b335cba6.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108235\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4AB6732353316BF5E\r\naccept-ranges: bytes\r\netag: \"1ACF64EC43DBA69D588479DEAC72A0E0\"\r\nlast-modified: Wed, 05 Mar 2025 11:59:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16925290932080090630\r\nx-oss-storage-class: Standard\r\ncontent-md5: Gs9k7EPbpp1YhHnerHKg4A==\r\nx-oss-server-time: 24\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYmglznz7LaNvRplShkXX9QKTB5NNcbnSOaD%2FZx7pjZFrCV3tVUC8TDPaWwnDORavUVCThD%2BvtGcdvN%2FgvR2UOdE33%2B59suWWFGdD1ClGJg3Md%2BA033sx%2FRF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef58d5d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1480, components 3","md5":"1acf64ec43dba69d588479deac72a0e0","sha1":"91be3366e28cd1fca36653972674cf2c3daa2544","sha256":"e3a3382440e30f7c8c4c06433b2156504c1ddd14cf36604f2b2df2d710da51fa","sha512":"b7de41fb677222a97f38ceab050efc424ae26e4b21e71ade42af8c222d71146bbb8e4b6b7b8b56ee64866ccebc1bae5b1af0c6993de5dbbea011acb81b6933f0","ssdeep":"1536:25i6J4PZBCUtbZmkUhpYPrdef8ExPPMYNVudVxZZ4LQ/uO4YNPqTH+9A8EtD5G:QnGBTZEoDdo8ExxVMzsouL0Pqj+9Ahg","tlshash":"78b30221df49b872d46c01707c936b64bdc7968abab460a7c8d90a7380bd9b3fc0755d","first_seen":"2025-05-14T12:02:49.168318Z","last_seen":"2026-06-01T04:12:49.39863Z","times_seen":308,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07Y5MLMZR/71UwjCXkvgL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07Y5MLMZR/71UwjCXkvgL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 218300\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F193A7E93933C97F51\r\naccept-ranges: bytes\r\netag: \"FE9D20EA793A99B21247C6DC97DCA60A\"\r\nlast-modified: Mon, 03 Mar 2025 23:44:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2456906153312190257\r\nx-oss-storage-class: Standard\r\ncontent-md5: /p0g6nk6mbISR8bcl9ymCg==\r\nx-oss-server-time: 24\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYoPmbZYNzAMpbKg5uS6q8J7jYS8ZCP38tPU1k1b2J81PzSRuV5HDwuPASMo5ymZwwqs0h9WfgCOErtnut5QKryLV1vOwCNggvYyvoFlav%2Fr0yCcMlk2Feqk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee6eccd56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":218300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1287, components 3","md5":"fe9d20ea793a99b21247c6dc97dca60a","sha1":"97e70f7c59a892df64201563ce1cdb2092d8f5fb","sha256":"d6cf0ec29d70fa79e2a0f2930580e9a078972fd76778b8dc1babc80760394158","sha512":"bbf85b830ffb13a68a5da22201f2260bbf0e767f36bfee6fde0964182f27f06b86278726e9a34f7d22a69d8660abab76e4046ee4bf230df6f03e3911d503abaa","ssdeep":"3072:/I4pAtCLktNgMg3eZ8Sn3NzPTsvZlafm0FDWkYVQnHOYwKfFHbJxUbO/ZFcZ+fG8:BpXLAWRBS3NrTsnGCRKfF7XgokOh8LG","tlshash":"7a24124a26761d7ae8ae7b34b749681d7932c3835a49b35e0f0ccd503bb4548f88e436","first_seen":"2025-05-14T12:02:49.165858Z","last_seen":"2026-06-01T04:12:49.479485Z","times_seen":225,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B09P6YP2HX/71Y1TJYVyVL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B09P6YP2HX/71Y1TJYVyVL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 127919\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F0794D103032132E70\r\naccept-ranges: bytes\r\netag: \"E84D23626EA8A86F71632BE40066600C\"\r\nlast-modified: Mon, 03 Mar 2025 23:32:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16564510729454233231\r\nx-oss-storage-class: Standard\r\ncontent-md5: 6E0jYm6oqG9xYyvkAGZgDA==\r\nx-oss-server-time: 12\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2VMCZHRgNrU%2BQr%2BIXGB7ubAp9OvQoW%2Fd3770RNAOFCx7LWdG7FQ8VkVSeT5GsAs%2FVHjnlDak%2F3YIOyxGdW8pJdahsCnky8G%2B8oZw%2FYBY7HeIPkKGqts6HeX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee71cd156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127919,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1185x1500, components 3","md5":"e84d23626ea8a86f71632be40066600c","sha1":"2add813c24e8161a10a782a720f3d7e428411b6d","sha256":"19ff932c63e8350cc55ac43b177f6e852541ea56f0a0ab794b521c6b5d6d6dec","sha512":"fb85a58e2b14a44d3215f78d673b4a77b421df9682b8a294483859dfd88985b0e0f684232750d91a19788b8e35cc96879e308dc3c0d385865a7cac2b2add7a50","ssdeep":"3072:hac6V5WC3GpHK8EyaqU9V9VxjeEj8/JFm+eLW:4VMC3Gpq8EyaqU9V1jBY/JBeW","tlshash":"18c302ce5651b41deafd5bb4053d03c098e2cf1b42a5af35f7801ec3e96da9829ac1a1","first_seen":"2025-05-14T12:02:49.198327Z","last_seen":"2026-06-01T04:12:49.402296Z","times_seen":225,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/4d482b28-e641-4480-aaf4-c9988302c3a4.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/4d482b28-e641-4480-aaf4-c9988302c3a4.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43917\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2ACF6C5353553D580\r\naccept-ranges: bytes\r\netag: \"89BEA2AFE63C05AF87CA02637E640326\"\r\nlast-modified: Wed, 05 Mar 2025 10:12:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17838636864511108267\r\nx-oss-storage-class: Standard\r\ncontent-md5: ib6ir+Y8Ba+HygJjfmQDJg==\r\nx-oss-server-time: 62\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6JDG%2BxC7VKxJD%2BBf98Xjie3eqvBOWqO%2FTa%2B31vRaEmYG7oLrRNuGq9ojhk9sJaM9a5F4Nxo1rYmh%2BFHesX%2FNCXn%2FyqKN5%2BPfahjYSxB9JV%2B%2F9n8RrN6rxqF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ace956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 882x1486, components 3","md5":"89bea2afe63c05af87ca02637e640326","sha1":"6a041e0927e5404db67fd71e9be05cb464a5660e","sha256":"2fa440f0c22e26f79fb48012fe305127201c5a4d2308489f4e390aa2198a4819","sha512":"7a8b67085457bc7b5d9928a79f958b80a0c250d5be257c3a4e4af45a31168aabbe65e20a05ce10a61ce3b75b0d0912db1c436bd394d9eef0d0751637a45dbe11","ssdeep":"768:1mJ8IJafnrDnZTVoMgwotWIsbLHqaE/5GlXu7qCs8m4M3jdR233hanFD:UjOPxVLgn01bLo/ElXuGH8PMDKhad","tlshash":"cb13d03163d27116ca2d9f36a64b143b95e5e2ee7e7a10898b721e1238d335327423ed","first_seen":"2024-11-28T13:33:20.854242Z","last_seen":"2026-06-01T04:12:49.505992Z","times_seen":250,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B083XL7MHT/81HMmrmL1yL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B083XL7MHT/81HMmrmL1yL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 251823\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F38B90443336BB30A3\r\naccept-ranges: bytes\r\netag: \"741856006F27D57E1933187914E245BC\"\r\nlast-modified: Wed, 05 Mar 2025 01:50:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11937656970770649080\r\nx-oss-storage-class: Standard\r\ncontent-md5: dBhWAG8n1X4ZMxh5FOJFvA==\r\nx-oss-server-time: 14\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1iAdiky8FxZl0FgcHJ2mYxTCspopybMJqe8wxNE7ZO%2FL0EV%2FVYNXzGhZThH7NpFk8N518%2BhP2FLiehnsXI2URTUmyQvCm85zTcZekQWoViMlsLVxFar1Rtx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef53d4f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":251823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1168, components 3","md5":"741856006f27d57e1933187914e245bc","sha1":"a0638e2dafaa92aa44c68aa4cc650423ffc1e18c","sha256":"1314b159722cc772636bb748a102d94a6a2493209045cda797fb00f32aa97abd","sha512":"ed52267b520a86eeca0b2fa562618ed58b6db668aa9076c3ca1d3ad7e3de112419b1125307d3bfe236413387c01ddf4db72aee1eaa9a44ef0f672e09dd6a0688","ssdeep":"3072:OjXgA0O1O77uclXFjv7zIAWmxfBMdOcrI75J4cjj+6TEmZLuWcH5XbT0UtO1SKQM:ONROJXpnIAddl7gM+640LSH5XbT0cQj","tlshash":"223423c89016f4d8d68137ba19ab118fbc27977bb820970f3e656f9060ed211f7245ea","first_seen":"2024-11-28T13:33:20.887549Z","last_seen":"2026-06-01T04:12:49.468126Z","times_seen":252,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B08PDWQ966/51c-VichdbL._AC_UL1200_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B08PDWQ966/51c-VichdbL._AC_UL1200_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77642\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4C390C331362CD7CD\r\naccept-ranges: bytes\r\netag: \"D10328D87EB612DD256C7417347C9A06\"\r\nlast-modified: Mon, 03 Mar 2025 14:24:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3716634800818796115\r\nx-oss-storage-class: Standard\r\ncontent-md5: 0QMo2H62Et0lbHQXNHyaBg==\r\nx-oss-server-time: 9\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2B9jHaIf6TU5dePpxW4pwvaByH38ePkCqcg16JIg7Gu52bXgzsI3FcNZ2obm34gUM6rH%2BBx%2BM4xBTAg%2BTcNyPCIGGI0VibRnEqzbYtN%2FAInEXfIQFMznYiRt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef56d5856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":77642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 809x1200, components 3","md5":"d10328d87eb612dd256c7417347c9a06","sha1":"0ea6f155821f7252eb866389a4fd1ad01564b861","sha256":"2487c0696bde480a7823619125dd46468f6ac8a502125d1315f7206655f6b77f","sha512":"1b9949b9364a95986d39dd17a1eb22f9a25100465a2b7f4b2cd75fe9a7c6156f81967e84abfb08dc6a6e548cf6fe28454d9e6a749a2345b8df55775fe3bd0f73","ssdeep":"1536:wODL57o72kgtroqxmnIodb5MZzXmw2NgZqTotk+NvxHrGvQz7:wAL5ciNmn9lW2DGZdt/","tlshash":"6a730229e35a4330fee2353e3226649186c79616bfb8231beddd71360e2972179f5c90","first_seen":"2024-11-28T13:33:20.905791Z","last_seen":"2026-07-22T06:11:18.563965Z","times_seen":345,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/1345a56f-224a-4a37-ab58-5bc752116025.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/1345a56f-224a-4a37-ab58-5bc752116025.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 122768\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F36AFD363735D86BA4\r\naccept-ranges: bytes\r\netag: \"EA645BEB61A8EDF1DE2D006C80504363\"\r\nlast-modified: Wed, 05 Mar 2025 02:33:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17092136952125443431\r\nx-oss-storage-class: Standard\r\ncontent-md5: 6mRb62Go7fHeLQBsgFBDYw==\r\nx-oss-server-time: 33\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3WcUgulfPXpxcxeFkLyxFcxg9tZC5AShy9GJ89uW2foUMI1FqisMS1y0b6%2Bk742oKXVi3Dp%2F0nKa1G1YIN03qIR%2FUdGvTdwgBlzTyoDNvF8DtUz8%2FWSJCwZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef58d5e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":122768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1383x1448, components 3","md5":"ea645beb61a8edf1de2d006c80504363","sha1":"8c99cda26ced6c6b909833533ac60acca8b59aa5","sha256":"673052843457a78fdaea795a1222f0a4c210ddf5278e5cb961e84720ef1ec1a3","sha512":"6246b8b59924b2362d321bfbde3bdee07ee85a30828543c35ffcbbbc1f9c76c9c178495331209080ac4d7c22707d6a8fdf95b23c1582b690f1738cfe5f22b45d","ssdeep":"3072:P40ofZoGxCsMySNKLE6hD2rR8aCKv0TDncTWbvBmlc:PxoqGEsjSNy695CKgY6Elc","tlshash":"3dc312c95e708645e2989fb6c8eb20c4df977af793bd1a5a2084d4c061ef598d373093","first_seen":"2025-05-14T12:02:49.17725Z","last_seen":"2026-06-01T04:12:49.481827Z","times_seen":232,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/deng.ab898199.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/deng.ab898199.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"3307-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3307,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab8981994be178ad2a8c4c35e420a912","sha1":"e133d4b4ae608ed1645aa56118bd0bf670cfe4fb","sha256":"8586097341b9c52302a437d09f860c8e2df9d16666f6c8641524304d19d6dfef","sha512":"de5ae372fbd49e3ec9c755f84b8f994a5cacf94247264a7a4558742ecb83dde5a4e4bb70701e798d11533eecc28ae74cc56adf31daa5551c1c732b59b2463009","ssdeep":"","tlshash":"836188e17364f3b46c4827dd9f3d2435ae6328e1b6034044d7b07926654949f8ddcce6","first_seen":"2025-04-18T11:31:53.088202Z","last_seen":"2026-08-08T10:48:35.709496Z","times_seen":614,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29992\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFC78BAF34311DA2DE\r\naccept-ranges: bytes\r\netag: \"87706F749B341F09C0D4F313A08FC43E\"\r\nlast-modified: Mon, 03 Mar 2025 17:11:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10265292697934787790\r\nx-oss-storage-class: Standard\r\ncontent-md5: h3BvdJs0HwnA1PMToI/EPg==\r\nx-oss-server-time: 21\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G08%2BQJbi8TvcYm7P7mQI%2BlEjTpTE5sOC9L4KKjF0K%2B%2FKCkV1WEpYiCzj9hQIL%2BC%2B1c0ke5todbc%2BqEaalKGinq6yr5RedBk76Z6X4%2BX0GzRpFRflOIKr9%2FW4\"}]}\r\ncf-ray: 9b7e4ed978e60b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-12T05:09:18.341824Z","times_seen":9956,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46207\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFCE63A83037E9094D\r\naccept-ranges: bytes\r\netag: \"AD3BB72E6CF979DF37C56CC70E70710C\"\r\nlast-modified: Wed, 05 Mar 2025 01:33:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3161547230029265639\r\nx-oss-storage-class: Standard\r\ncontent-md5: rTu3Lmz5ed83xWzHDnBxDA==\r\nx-oss-server-time: 18\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wj1nPzqafVDmph01tlJePUzLDtpCO5z4A37UmfuGDZrw48ZvpqdkYRiKu7yJ2OFj1SRMbibo4OeB05GUDhcIhz%2FvX5x4hqlBxxArx%2B4Mr5uVRv3MoPvaVq%2FR\"}]}\r\ncf-ray: 9b7e4eda19420b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":46207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-12T05:09:18.31439Z","times_seen":9922,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":141,"dns":7,"connect":3,"send":0,"wait":7,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/b71cb14c-309c-4993-881d-93484f07e38e.jpeg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/b71cb14c-309c-4993-881d-93484f07e38e.jpeg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37359\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F18B90443232C82FA3\r\naccept-ranges: bytes\r\netag: \"7B17CAD1A04C472EFBD18A438AB99EAE\"\r\nlast-modified: Sat, 22 Mar 2025 13:40:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2602271016306954933\r\nx-oss-storage-class: Standard\r\ncontent-md5: exfK0aBMRy770YpDirmerg==\r\nx-oss-server-time: 17\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGXlT%2FjgZ3JWsco2eX1PHtXTgjYe%2FM8Y0lcv1KVLj%2FlAwRA%2Fw5q0t04PDJPVN3VCTx4a948rA5WQX01Hg%2FZWLaUJPXWvckIzJsdCj9KqA0r6SjurtoiOjYmt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4bca956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 851x681, components 3","md5":"7b17cad1a04c472efbd18a438ab99eae","sha1":"47d3c180b5af0d7508e8ba974a52fa4f6708bc0c","sha256":"bfe26bdd023c874ae88014de1a32c2fdef07b294de792621501d44efa63efb7f","sha512":"a5e4c5c75df590cbc206d54167b2b952a534adddb7a2029599cf446ebeb7bcd55e07b1bbf7eacedf50a9749c536faf2047b910cab2187a2f98830849a40bc2ff","ssdeep":"768:CKHatsFoibpTi4VnBmYtofC8RTozh/Lbda1zYyGvF+888888888888O:h3bptb+9RkV//M12X","tlshash":"29f2ae9383826ec1dfd92bb5329aa78533bc369bd5340c6cc459fdef34664308a10ae1","first_seen":"2024-11-28T13:33:20.874706Z","last_seen":"2026-06-01T04:12:49.464235Z","times_seen":225,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com//f3b85132-3409-408c-86b5-78df313458e0.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET //f3b85132-3409-408c-86b5-78df313458e0.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 232420\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F0C390C3313644D5CD\r\naccept-ranges: bytes\r\netag: \"F037B981B19D4A2AA7B7A9DA85E5DA55\"\r\nlast-modified: Sat, 30 Aug 2025 08:54:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11305948341045429907\r\nx-oss-storage-class: Standard\r\ncontent-md5: 8De5gbGdSiqnt6naheXaVQ==\r\nx-oss-server-time: 119\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGUbWdgFtuR79IblUWZvsG3zptABUD9Ar%2B6X93YHUjTV8BFfSIsoBNBz8%2FKBnpatxrJv0Ma9D51vJIhe3FJ3%2B1HG4vk9yyOuu60D8PMny2rpPo5CK%2BVmDYhq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4ecae56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":232420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x800, components 3","md5":"f037b981b19d4a2aa7b7a9da85e5da55","sha1":"a679c2d0a17cda709f302956f6c0f599b07a9bf3","sha256":"a0f75295a946e067f77d4ee77cb1b95e5f9ff40b31bc2132580b7e8a86cb6586","sha512":"f3694ce24af918ee98763ec668e8e0a726bd7fa70e6d92f07abd91790098c50b4dd645acbe507d34c7793f984d6900af65370243a470c24de53439de14b3824e","ssdeep":"6144:AbTuyIGRq06E3NHdmv+5d6kjMWMbGAdE8WnzE3k4:A3u2qBEdHg2zdQdbb+8WnR4","tlshash":"113402b5fbd7e3d157431a1f447c7e772709a3c010eaa54b49231da8a1a4fba228387d","first_seen":"2025-09-04T23:10:53.254198Z","last_seen":"2026-06-01T04:12:49.488307Z","times_seen":157,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b3.1e2d28a7.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b3.1e2d28a7.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"23115-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 426 x 337, 8-bit colormap, non-interlaced","md5":"1e2d28a7857b1d7a488b2a07e2d5863c","sha1":"3cba6ddec045283507f5b23b730335917c2bba71","sha256":"1adb465e564393cd5cafda640757cb584a1758885cbcf8a3acb0aab5a178f1e4","sha512":"01d811b4dd9471bcef4475d94e94ac38d2d683d8619c0395da16d29072f03bf7197df22d2cf19f57b0497a49a52c6c85857e328a94280594aa606a7797f7e560","ssdeep":"384:M2vJA326nurYq6YLgGJeJzlppzkJPeLd5v/aJDhLkZfvTskP6ajHq:M0fjYSAzvpzHd5HajIZIk1jHq","tlshash":"f6a2f1c54840eb060da44ef6d9ef9368068e0477b2944cf362a2a81c7f9e7bd526364e","first_seen":"2025-01-14T11:35:46.455155Z","last_seen":"2026-07-31T22:21:48.350473Z","times_seen":522,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/65f4753d-3296-4f9c-9972-cfbf8b84c100.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/65f4753d-3296-4f9c-9972-cfbf8b84c100.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5802\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB4B813633D1CFDE\r\naccept-ranges: bytes\r\netag: \"0E1A7CBF311D0AF3AB5049207C152B5A\"\r\nlast-modified: Sat, 22 Mar 2025 13:38:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 705492703023486529\r\nx-oss-storage-class: Standard\r\ncontent-md5: Dhp8vzEdCvOrUEkgfBUrWg==\r\nx-oss-server-time: 70\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3WHCfUdtIL7P8CTmIPkTag6JfAj0QouLxW5MRIxep%2BlVzBZJs7EK7XjDkvX2zJFxPektV9bsz3eV7YjbCO%2Fp3KUO5EObjwsA75jdSJarm1S0d79kbPf%2BOZD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee55cb756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x240, components 3","md5":"0e1a7cbf311d0af3ab5049207c152b5a","sha1":"7fd361b317ac2ef33dd8c3ce465a1ebefbf00436","sha256":"e6626254fbb4169ce40eef060441ad1c49085584d1cd329dd8e995bbe83d3869","sha512":"0882a300ce3ac7e934d8dab3a70e89b89a830a11ab99068e14b5dee511e25b9f26937a1fa2feed54bc9aaa131c05027780b7fdbbf39862d9a51a4dec0b997ace","ssdeep":"96:IQCN3HOxej/2DWVC0pKm4FV2ezJxpkUJLotxFJDbGqraybJU:IQ2Ca26o0p4ieNxToPF9PmyNU","tlshash":"a8c18db564344e3dd9094739c4c39194cff3ba2914ea5a9df28eb92f84a4acb0a000db","first_seen":"2024-11-28T13:33:20.935113Z","last_seen":"2026-06-01T04:12:49.419155Z","times_seen":213,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-12-27/89615efc-802a-4264-b53d-b775122f7868.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-12-27/89615efc-802a-4264-b53d-b775122f7868.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21941\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB4B813732CCCFDE\r\naccept-ranges: bytes\r\netag: \"77F3C58CDE99E5512A9CEF0D40F5EAAA\"\r\nlast-modified: Mon, 26 May 2025 07:46:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14153511294060662926\r\nx-oss-storage-class: Standard\r\ncontent-md5: d/PFjN6Z5VEqnO8NQPXqqg==\r\nx-oss-server-time: 11\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FoTIvUr7eeXmJBWpO7MG5KarRbHlKPQhmP6%2FCiejrZzzAkCB1YBmOOkrYVB60%2F7ANNWsuDL6s2meYgWW6sCGBeGLhi5XA5tqCUycuxpjLk9HgD4Lj7AphNV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee57cbb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 823x647, components 3","md5":"77f3c58cde99e5512a9cef0d40f5eaaa","sha1":"942249e2a97b50889f8c8eabf5480d74428a003f","sha256":"f9a3d10991a327d1aa927edafd566569a15e3ed9c54b8b7148ffbb5a0497d613","sha512":"2fa299f3ba3527e056bc6c7ec0e29e0145b516a873d6236f4d9debacfe606cd5dac1f3a1079baa313fc30ae4e03f7112d391b03429aaa6fa02bb6e72a9c2711a","ssdeep":"384:Jw9+9pvmrd4IW7RsO7JLdZdLkBstFRAy1OzI5VoNZEqga:Jy+TemdRxJLdMBwFRuI5vqga","tlshash":"7aa2df8142cd8c7ae145a57bc6136f0d384a696066f0c6d9ca222c34ff193f65cbaacc","first_seen":"2025-06-10T12:06:59.37238Z","last_seen":"2026-06-01T04:12:49.454648Z","times_seen":207,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07Y2BP7F2/91y9TNcqo6L._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07Y2BP7F2/91y9TNcqo6L._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 369014\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB6732343399BD5E\r\naccept-ranges: bytes\r\netag: \"7DB384C3F2430D29CE297E8DDDD8A976\"\r\nlast-modified: Tue, 04 Mar 2025 18:52:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 72832318915850664\r\nx-oss-storage-class: Standard\r\ncontent-md5: fbOEw/JDDSnOKX6N3dipdg==\r\nx-oss-server-time: 86\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4HLgVAe7Ke2rHZqLKX04S5QbeChuiIWNV%2BCmm9oZ8KgpqUKBqitehXiQ9ADD%2FJu5s323mSDPg1AnsqzgrJHbehm8jFvur2YfDuVn6VltfxGWS39UsKSvGB3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee70cce56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":369014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x846, components 3","md5":"7db384c3f2430d29ce297e8dddd8a976","sha1":"4517ba3f79e8d59c1edc91eb5c4194e2807f6e51","sha256":"bce95de6e329b40cc7362ba1e746a95566d51ac6dc35e6a2318428be14ce71c4","sha512":"7ca132458fa658244acc51411e74b3d8acb59a76f2fa1899d145da94b46ced16e9d2a94259472bde43f4c8b99e1c9606f09421c2c740ac7542f4d42837ad408f","ssdeep":"6144:jAptWg5W4nuicy6nHkxb13iSqePYKxoGUVt2fv7xXINy115VbFBjqVfiBo44YbnB:cp5r+yl3W/aSc1NEfipFbgRY","tlshash":"8b7423ca694da0a1f3ec4575b74dd7963e198650ca48cb83e1605eb23a3ffc1c7427a4","first_seen":"2025-05-14T12:02:49.152636Z","last_seen":"2026-06-01T04:12:49.401394Z","times_seen":226,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com//36f119d8-b171-47b1-842e-cd6c10e7516d.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET //36f119d8-b171-47b1-842e-cd6c10e7516d.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 783064\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFAB4B8136356FCEDE\r\naccept-ranges: bytes\r\netag: \"85A206B1E5581A032C3B6B3F33CF9F64\"\r\nlast-modified: Fri, 29 Aug 2025 07:58:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5776412901524786085\r\nx-oss-storage-class: Standard\r\ncontent-md5: haIGseVYGgMsO2s/M8+fZA==\r\nx-oss-server-time: 18\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNZflhwG4G4lPi0JJkA2xmT9kfmQFCtfzzuaxVoG4DeVvL2yJdT8mPpwq027Kbh8lrOeniM2912kcRyfLExBUgnj4HIMwnXpXQ8Q%2Fo6zNEH9cZC9v%2FjZT8LG\"}]}\r\ncf-ray: 9b7e4ed978ea0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":783064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1914 x 574, 8-bit/color RGBA, non-interlaced","md5":"85a206b1e5581a032c3b6b3f33cf9f64","sha1":"46f74b9a1823800144625e8c12dac18653c53562","sha256":"3b6754f9a6cf029bccc20431c08f7d5dc3fdb797df5e145f6dbb4dc666427b9e","sha512":"2e1f0240fe8330430e5d827e45586a619cf6398e0fa46977a5adce775c94a82fe28fbab3de36330bea32fae1d81ac5159d8c052e5fa95e8374be4a75fc45db99","ssdeep":"12288:WjkKWxExNLgLEhjgnTCgtKeh2rdf0Aw/oTRHEMojBr5zaxON+iDIZMzC6DLdaPZf:WoKnNLgLEanTCgtKehuh0+1HEMojBr5C","tlshash":"22f423b021af272fd8dfa0b78d889a6820d08d7e2af550f43b019bd6956c7573580fb1","first_seen":"2025-09-15T01:00:18.609905Z","last_seen":"2026-07-17T17:41:48.648745Z","times_seen":309,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":86,"dns":24,"connect":4,"send":0,"wait":15,"receive":81,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43151\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFAB4B81373873CEDE\r\naccept-ranges: bytes\r\netag: \"B367A1A2939ABED5721BA1CF5FD272AC\"\r\nlast-modified: Mon, 03 Mar 2025 12:41:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5575988060634517670\r\nx-oss-storage-class: Standard\r\ncontent-md5: s2ehopOavtVyG6HPX9JyrA==\r\nx-oss-server-time: 41\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qcyliieatj1fbhY6fnCN3POiq20AEnolphtift9Y%2BXzeJE7cuwOVi6cfKh8gxu3XYqsnws8adJcBuX1i53ZKLcaBOKkRM8ISXtU7Vgg6EBcHS%2FOKXpJHhYgS\"}]}\r\ncf-ray: 9b7e4ed9c91d0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":43151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.320885Z","times_seen":9573,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":103,"dns":6,"connect":6,"send":0,"wait":13,"receive":13,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B09TVFT2KK/71IU1P1zBjL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B09TVFT2KK/71IU1P1zBjL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148420\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2CE63A83538920B4D\r\naccept-ranges: bytes\r\netag: \"7AF0CC0A12DDCD2AADFE6A05B5828F6A\"\r\nlast-modified: Sun, 02 Mar 2025 19:46:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9892867271896207298\r\nx-oss-storage-class: Standard\r\ncontent-md5: evDMChLdzSqt/moFtYKPag==\r\nx-oss-server-time: 31\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6ASWARCGqiy5W7fvjXwgFuOkJAD3FNiB8scqWQd1VsW4NV%2FsZAq6RLhyW1lL6kW8NlkBdEMvVu2WjUK4cGXNnF56C1jwYX9HMabpSCyQCfIvkiCnYA1o6JO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee85cdf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1471, components 3","md5":"7af0cc0a12ddcd2aadfe6a05b5828f6a","sha1":"cb2fc4ab0403d4a6e6de3241fb118c5aeebe31e8","sha256":"5929acb0f57cc20055d53dd2e96cedfa716071ac1f34de64d2da27b82a261ab5","sha512":"fe5e670eeb8db88b48c0a1ff0be2d53bcc08b8f21df5fe03082d2d86c96b093fbe5d73a58c49d1be86c58bc95bd5259fc4d08040fdd5e698e1e95f6334e1d329","ssdeep":"3072:VMVuKD+nHnTDRNPGQbMFImBkGjUzFGFc/Pq+EHwXxn9i:4D0H5NZMbGGUzFGuadwXp9i","tlshash":"bee312ec070b0b5bc4891af65b93b6d4cf728293a005af26a13d115e98ace91ffc9543","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-06-01T04:12:49.472276Z","times_seen":245,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/3f8028a7-cb8f-41dc-b549-2793768875e9.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/3f8028a7-cb8f-41dc-b549-2793768875e9.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57029\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2EE24003231680646\r\naccept-ranges: bytes\r\netag: \"ED8FE44048A412DC69A412FE641DAF1D\"\r\nlast-modified: Sun, 02 Mar 2025 15:37:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10071648566990359335\r\nx-oss-storage-class: Standard\r\ncontent-md5: 7Y/kQEikEtxppBL+ZB2vHQ==\r\nx-oss-server-time: 19\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZrYZAjui%2F6LCo4x7ZRAjOEq4jk5iInVUlX9cvz%2Fc7SVhKvSNr%2B6QxHaIjU%2FTAd1zSf0XyHf5Vun3%2BHUYlx2FfYAALxAxu%2F41I5rlWPl9ZawOCVNwfRYuXPp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8dcee56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":57029,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1179, components 3","md5":"ed8fe44048a412dc69a412fe641daf1d","sha1":"315b1e86ac301b27c3137340f482c95222fbe045","sha256":"a5ed751ea3257ed2065f9d0867a231f0ed37368686c756b94926d1334c106195","sha512":"4de8698607a86a3ee8f6687b90e8ce8fa497ecc6b8bad0ba8f2549c7dcbb2d2764936d0b3673f1debbd1fbd3d1a95db10d541438d4f41d1358d40cdc38cfab32","ssdeep":"1536:T9arDPJf6TD9rvyFGcAIcLkI/vwoPPXXfiY2rSSFDyTMR:Zidf6HJyFGdhkgooPPnKFrSmWA","tlshash":"1043f10ed9b01167cfb72734faa877bcb7981a20f5a3781cc357d4a118096ae9ec1466","first_seen":"2025-05-14T12:02:49.215864Z","last_seen":"2026-06-01T04:12:49.427684Z","times_seen":224,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B01KTMGXCW/81vN%252BDOpp3L._SL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B01KTMGXCW/81vN%252BDOpp3L._SL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 180545\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2B1E823353583BE4C\r\naccept-ranges: bytes\r\netag: \"A60B4CFF9E69AD40B8648113AC3F7E1F\"\r\nlast-modified: Wed, 05 Mar 2025 08:40:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14126600805649279872\r\nx-oss-storage-class: Standard\r\ncontent-md5: pgtM/55prUC4ZIETrD9+Hw==\r\nx-oss-server-time: 43\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyDnLeZ5C6OM5D26co%2FPTnzyfQ5tBV1z11l8ZmuJvXLRsq5nb09YaiO7rGssw6OaHIuJbP53P%2BnJ25oOQXaoxAogZvVWxehD2Ed%2FYuswTYJVdsYJMcimYd6O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ecf056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":180545,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"a60b4cff9e69ad40b8648113ac3f7e1f","sha1":"587414144d73e22d9441a34861764d6929f95fa7","sha256":"2215c882c107cba346673861db4ea18b5a161bb8eb84c47105ef3c658ee4ec2e","sha512":"99dfe6ae0afd685c265a7da6f61825b849318aff17e7cd09d27807b77440b204408d3a566ac39b401c691d2ef6e2dea5d4a603ce7befbb3504de4016eca0e914","ssdeep":"3072:YWWt1gXqC/8qsummZqMXkcGk/J6+Jfi5CJqjUDPPY9GfkJ5uChAovF06h5H9G5:Yy8q1mm4MTJ/J6if5IsnY9GMXuChAYFY","tlshash":"fb0412bb6fe756c5c6711632473bdbb9fd470e9e3277420a92156923b63010084ba19f","first_seen":"2024-07-31T10:49:37Z","last_seen":"2026-06-01T04:12:49.440545Z","times_seen":265,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B096SJK96X/61iOPozcAAL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B096SJK96X/61iOPozcAAL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48165\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4BC6A5B33380B82A7\r\naccept-ranges: bytes\r\netag: \"AFD00E6AB1E8C07478A63D659C8973A9\"\r\nlast-modified: Mon, 03 Mar 2025 01:43:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9328324781282141145\r\nx-oss-storage-class: Standard\r\ncontent-md5: r9AOarHowHR4pj1lnIlzqQ==\r\nx-oss-server-time: 31\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6VwuI7UUdT1rxjA9iQpFYj6CkYY1xyt1zE42D8k%2BJzbkEGOMPsLV5lTgRZ9Y6EwQkibr7CL%2Bwfu7p3iGCtTA7EfWqtzZUHdc1adBdixerPL02BY4mXAt1hV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef55d5456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x639, components 3","md5":"afd00e6ab1e8c07478a63d659c8973a9","sha1":"0137b13771f9e08a1f69245f58077126d3fb84e0","sha256":"d958e93bf59584beb25d0f47dafb997bd56d777cd95aedcb6e73b7152d6dbcf5","sha512":"4f7899d30a8502ad149943edaf710a45d15dcf8ff632a7cedce030dd8103436ca27b250cfb31f17ca027a2ecebf5931f24f1bf14600b954157f2664d5a1a177a","ssdeep":"768:1otu8eHvcZZ8qmOLU8YJy8vaidDMU7ZxBUHqijE/IHhF+Qs3u3mM1yK7d2AAv:Gw8gJqmMJSy8vNwU7ZxiHqioABFRsIm3","tlshash":"db23f1638e4e26e8fd12753fb402606b83a5df27441c5b5425b48147c7eea63ef2e2b4","first_seen":"2024-11-28T13:33:20.899025Z","last_seen":"2026-06-01T04:12:49.502259Z","times_seen":280,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/css/vendors~app.d2baf644.css","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:28.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/css/vendors~app.d2baf644.css HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"248173-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"135c59bd4e0d6275d7a9721535a3d129","sha1":"a3151a3da2a5283917e6025aa491772404c3f1a9","sha256":"01b878e1ab0c314f31db6ee5cd2006610e5e01ff101cab9ba3547e3337461b44","sha512":"17008d74cae07da2659c2a796d542a7cf2415ac6666ae96eeb16ac5f4990d8cfb67e1725e04c692b5be18557a43111caec56bd5e133dcf085df206a10d4c422b","ssdeep":"1536:t28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:WtKw/27eDLL6ob6v7f65WCXkb","tlshash":"2034b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-03-20T05:26:51Z","last_seen":"2026-07-31T06:32:59.736036Z","times_seen":2128,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/f510fc14-de24-44fa-90df-5a6e664fa123.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/f510fc14-de24-44fa-90df-5a6e664fa123.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93505\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1ACF6C5323323D580\r\naccept-ranges: bytes\r\netag: \"E8AE05DD521D6E2B7E671234B8C39EDD\"\r\nlast-modified: Tue, 04 Mar 2025 00:12:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3994819087248198554\r\nx-oss-storage-class: Standard\r\ncontent-md5: 6K4F3VIdbit+ZxI0uMOe3Q==\r\nx-oss-server-time: 16\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YsAY4K%2F1z%2F1UI3ChLtfwZf8jL00UGGwVU2RlkU1RhEROKswm9CCBFjKaqMlkKrHvVLqBM3Qmip2qJDPBr5jsV9OvthORvh4VlvDsE1zb0%2FkoV8R2lpAmhLu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee6eccc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":93505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"e8ae05dd521d6e2b7e671234b8c39edd","sha1":"06e3c72ad7f1d6ae514bb3846107cc947bc56d2e","sha256":"15ca443ba9adf0e22bad24fb53abdff5942a1ceb41d887baa8723e53f5451978","sha512":"1a12554cf4ec6c129965e03b71f1a1997e30c101a1015060330fca54672d8850f32b6a05f97c3a91899dec22a40c759723799593c2afc0f50afdcdb5127ae300","ssdeep":"1536:L/l82lbf23IqDPLzXK5YBouiiHBxwhVaOCTquc7aVjRJGZrXKvzGRqCkJJjh8RHh:r3RoBjLzXK/iIVaOaqucu5rGFEzGRqDa","tlshash":"4093120bde338769e825b97649e43530377e1f1c7b050eb456a8eb22d3375e1e094993","first_seen":"2025-05-22T08:56:06.715432Z","last_seen":"2026-06-01T04:12:49.50374Z","times_seen":217,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B0C5WMTDGS/71WmU7uJsGL._AC_SL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B0C5WMTDGS/71WmU7uJsGL._AC_SL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 121660\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1CE63A83037160B4D\r\naccept-ranges: bytes\r\netag: \"2B32C76B0F9E11FDEDFDEBB4E3863E41\"\r\nlast-modified: Mon, 03 Mar 2025 22:13:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15600896717396174467\r\nx-oss-storage-class: Standard\r\ncontent-md5: KzLHaw+eEf3t/eu044Y+QQ==\r\nx-oss-server-time: 45\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjmus6qNx83npt7XPiT6bushWlSylVY83iDwP3NtAO4iRSdxmjLnuFaf17iDSnQrFcx3e%2BlJAeDE83jiscly1xQ1Vn39KEmd97HA8SLFhJGN05zXTIb3iDck\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8bceb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":121660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"2b32c76b0f9e11fdedfdebb4e3863e41","sha1":"95a0281b1bb829814d57fb987791264a5e78b74e","sha256":"2664495abb00c783b5905189d1a9e5942c2d3f910594fca67fd6db2cc0be4d76","sha512":"8720cec2f98a9273ec847a9c216f4903639ebd4849a799263a9f847c318dd1ae1ef953895012060745b0bb3350a7f92d8b4e997372f22261f91da8874be07a50","ssdeep":"3072:f9P4LzQ+rOor3tRVljnq+Q4k092dgmXX9Zucpbo2:FgY+rOMRVlv19SgetEsbo2","tlshash":"55c30295ac975d6cecda5370c0813e8ae84381915acfc31e6ac09cd90fae736be57361","first_seen":"2024-08-29T18:14:11.962245Z","last_seen":"2026-06-01T04:12:49.49411Z","times_seen":272,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/3b96b714-d4a8-43b5-8b8f-17b18270d984.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/3b96b714-d4a8-43b5-8b8f-17b18270d984.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168477\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2CE63A831369C0B4D\r\naccept-ranges: bytes\r\netag: \"4DCA69E6E89DD60C38708A25EA1D3730\"\r\nlast-modified: Mon, 03 Mar 2025 17:54:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14848939985713036169\r\nx-oss-storage-class: Standard\r\ncontent-md5: Tcpp5uid1gw4cIol6h03MA==\r\nx-oss-server-time: 33\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKDtWED1%2BjLOmuVESzVsLfbiAIaxXyRBzMYxpJ%2FMpFcHBgV%2BjssmOCVB6nAZsoLXCv95qNnG0xtEYf45552Lif572SP%2FCiDd9tcBqeEEkxNuo0MwqGZBpEu7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ccec56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":168477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1499, components 3","md5":"4dca69e6e89dd60c38708a25ea1d3730","sha1":"b3101fdd91ae998495f070a974218879676bf100","sha256":"ab409bccad9d3c70559064d94ade0a39afeea6a7f51da728436e6fc9e3eb529d","sha512":"4dd1328605622ca3a13a637cfc8d3757fbd59e3d70a5e40476e8e170b57024c29911d17442be0659a699cd8189baa8de48e8bc7cb6d8fb3f52e2fa72ffb91b96","ssdeep":"3072:lT/F3dpcQZswLgATH7oO5glQ10lHdYlZivICxFxbmWwNJeQKG1lEx:x/FbZs+tTbbqH6iACxDbMF1lEx","tlshash":"04f3f1b7e88aa378dc98d4b522b3c138c3998cb4fa1f59b3663cfd2710521c95c85d88","first_seen":"2025-05-14T12:02:49.159907Z","last_seen":"2026-06-01T04:12:49.453882Z","times_seen":224,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/d9d5cf69-38e5-4fd5-8815-4fe75b85825a.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/d9d5cf69-38e5-4fd5-8815-4fe75b85825a.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75604\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3BC6A5B37376D81A7\r\naccept-ranges: bytes\r\netag: \"2956EC6AE04A2BDED4E2D2406680C6E8\"\r\nlast-modified: Sun, 02 Mar 2025 15:31:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12158018557731176809\r\nx-oss-storage-class: Standard\r\ncontent-md5: KVbsauBKK97U4tJAZoDG6A==\r\nx-oss-server-time: 146\r\nage: 526063\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2LCaVqfbq2niMl5p5rA%2BtL%2F%2FkWwmXAwRVKlHgHy4Vw1X8kyZwV95%2BGL4V2uciFSBYzDdfk%2FLvo9zuXjnE4m9iUKc2jyzfZaheVtIS42OnxpNp%2BbG6tngQ6x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ecf156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 657x1500, components 3","md5":"2956ec6ae04a2bded4e2d2406680c6e8","sha1":"502dc946aae983ca7282607455e7fb6eb12075e0","sha256":"3f37df8aadb07084657a218735478bf833c8bef269cb967acbeba762bc742cae","sha512":"6a82c24eff3a2b20ecb5ef4efab44c2ca7f021b70bfcba19435b7ea97a2e2705e607956ed5996bc4f92d78208bffc0dedd96a3815aba2589a4c74f1d2f23bfed","ssdeep":"1536:Tr16gaZ2USyWDLNTnYfS1swcTfo4B3imMpSnZDFlIuaFn3Z:TrkxSDLNTnGS1swcbFNimM4DFTaF3Z","tlshash":"5c730240e6507eaed68aef310e7b52dcff0b5eb456e31d162a1c7038ab1d1c258196d2","first_seen":"2024-05-03T01:49:14Z","last_seen":"2026-06-01T04:12:49.425985Z","times_seen":231,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07FFBHM7F/91APJ9%252Bqs2L._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07FFBHM7F/91APJ9%252Bqs2L._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243033\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F493A7E93230578151\r\naccept-ranges: bytes\r\netag: \"195FE53AD24A710017A18432B0EAFFDE\"\r\nlast-modified: Mon, 03 Mar 2025 13:51:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4619853295045262758\r\nx-oss-storage-class: Standard\r\ncontent-md5: GV/lOtJKcQAXoYQysOr/3g==\r\nx-oss-server-time: 13\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkrJ4xL0qIakoa72260mGvqUbxjs9y43tsoFuiI%2FixB0LMVOXDgW2xs7wzzF5PV8Equun6%2FAurK%2Fzk5xOTKkYpcWZ%2BPTtL1FOXp6NcwqXBfxYA1%2F63aF79pV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef52d4d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":243033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 998x1500, components 3","md5":"195fe53ad24a710017a18432b0eaffde","sha1":"a8a424fdeecda89bb1316382288c598513a583e1","sha256":"3476300a7722bef4802da4d199ae06b54a5b26783557903ba46edb8beb605768","sha512":"7b1a414d89198b63d112fb57c23f1db66bb01eff79539d169bea8360b9df350810ce422a8508aea2fe2c6be27abc167db0f1a2d529b9770e71e5739dba311ec3","ssdeep":"3072:AnUEgSIG6EVQEIdPkXKAaGly/rct+R3JehdHFaDfC2IwzX9LHzBJZrYka4ZQ91AU:V5SIG6M9Rly/AMR3JIM66zXhBzXTKms","tlshash":"f4342372968026e4cfdfe2f870d8fa71e963fd6a721f160a3545de8231671e82e15082","first_seen":"2024-03-20T05:26:51Z","last_seen":"2026-06-01T04:12:49.48106Z","times_seen":325,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/31a60c93-c880-4ea2-82c7-fd8640467939.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/31a60c93-c880-4ea2-82c7-fd8640467939.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85265\r\npriority: u=4,i=?0\r\nx-oss-request-id: 69540F64E613583536392DC2\r\naccept-ranges: bytes\r\netag: \"52D2D3D5311862DFC51DA30DB5B23948\"\r\nlast-modified: Thu, 06 Mar 2025 08:14:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8641452398880554476\r\nx-oss-storage-class: Standard\r\ncontent-md5: UtLT1TEYYt/FHaMNtbI5SA==\r\nx-oss-server-time: 5\r\nage: 282752\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2QRgRyRG8In7moO1Xood3dYdIOQliQ8x5sesWyf1%2Bry2qUzttJYskw86sKT6%2BZcijHTDONiRszLVEYlHy9oeaCeMbWwwwKcrhw%2Fk9C7smUzaTvIersAuN6C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef54d5156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":85265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1009x1500, components 3","md5":"52d2d3d5311862dfc51da30db5b23948","sha1":"618cdfea019d82ecb94884fa9eb20acb6e3665a2","sha256":"28ff7c84af279bcf74811c3790b771361ca22db5dc5a15b3450eef9c8251c5a8","sha512":"848b7af0ad78a26d5398fdce3295888bd31022b1d014ed584ca780f568dc37a9e0c011e5d4d4fab364cb2909fc9d4dccd540506a5768a32abc68c818a4fd63ab","ssdeep":"1536:nnACZF9BVoM6STies2U744zO/htKkDfA+2rDzDtMryWArFHSvziV9uvcg:nnAeFwSTe7m/htKm2PzYaFHS7m6cg","tlshash":"3b83134d897c9fadf1a6e17508281f27bf0ac81ea8e31744f1357f1944b89f43aad904","first_seen":"2024-11-28T13:33:20.84269Z","last_seen":"2026-06-01T04:12:49.464847Z","times_seen":321,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/9530a65d-49b3-432d-95af-109524473913.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/9530a65d-49b3-432d-95af-109524473913.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 13496\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB6732343674BD5E\r\naccept-ranges: bytes\r\netag: \"A947A9E09573ED1E21AC9828E09C9E84\"\r\nlast-modified: Sat, 22 Mar 2025 13:45:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17205911100860712825\r\nx-oss-storage-class: Standard\r\ncontent-md5: qUep4JVz7R4hrJgo4JyehA==\r\nx-oss-server-time: 12\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6jOnPYgp17TJ46FjV1QEnccCPpRy%2BYiHmQ3awd0NCtzMPpMO5r4631brKCCkSS%2BzfpJ%2BC3%2FKti4o8vLyaRbiy8%2BQZS46MPo4rCBdkHwDDHA1%2Fc56Xdm3siv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee54cb656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 240, 8-bit/color RGBA, non-interlaced","md5":"a947a9e09573ed1e21ac9828e09c9e84","sha1":"f1a136ac37e897882db0cf316f71aaef97d25be6","sha256":"ff581f79597a6ee6aea53f1b6f4f253706f6baa6d47d44a301fee0fc41469b3d","sha512":"4c8a201d74253d563b6dd27333b703a86f9ca7828c5b895c9d1e12db26562169766ea952e5f7bfbd1a9cd5cdf5220e5b1060c61da8be6bd0261f5948b40ea662","ssdeep":"384:DRMfffffx+u9pl8utUjOQC93nH4gUNo1mvfdfffffq:1Mffffp+MytiXHXMvfdfffffq","tlshash":"5752bfcd97a9533a821c725dccf16a01f901fd0a8899b89c78dc4431d83ecdf7a656e2","first_seen":"2024-11-28T13:33:20.930245Z","last_seen":"2026-06-01T04:12:49.478702Z","times_seen":213,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/00ec72cd-0205-49cc-8b2e-f701f72b5276.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/00ec72cd-0205-49cc-8b2e-f701f72b5276.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 150041\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1C390C33538FBD5CD\r\naccept-ranges: bytes\r\netag: \"CEE5CC7875A610BD813CC4E517167087\"\r\nlast-modified: Mon, 03 Mar 2025 21:28:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10377857218569015025\r\nx-oss-storage-class: Standard\r\ncontent-md5: zuXMeHWmEL2BPMTlFxZwhw==\r\nx-oss-server-time: 15\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8E2GLRh9qV05fZ0XlZbPyqKBpmBkCU9Xu%2FCFYQ6s46f%2B5gLb7QkDA6txXze0jECeyArE6WVoieHVdeP%2F85%2BTK5uoAhwS0eEEiX%2BUMEk8633LOoWetz5UyVkp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee6dccb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":150041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 991x1500, components 3","md5":"cee5cc7875a610bd813cc4e517167087","sha1":"92ebadaa1202b8861fc33b192701cba2e0f6c562","sha256":"fdaa4e4e53dd38936917c18ae3a20bcf29d03f606fc1198a082581e927310aac","sha512":"11e74dbca8fe5b5c96f1d490d26811042ff11f76d3545bd4190ac9357d50c9765a77713e5ffe1c4378fa9e0b2f057fd865a6c872e689bce54322960912df1973","ssdeep":"3072:gIEdQZw5T1It4fW3YwkwzqVmiN+u84CqQ6ly3rLY9:g2E1dWrp8vEu84GL3rLY9","tlshash":"6de3123fe81f7742f420b77fc82979ba4aa36327597476063d025bc469ade506f091c2","first_seen":"2025-05-22T08:56:06.711188Z","last_seen":"2026-06-01T04:12:49.442248Z","times_seen":217,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/2831aac4-7194-4ee8-baae-51eeea9e6bf3.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/2831aac4-7194-4ee8-baae-51eeea9e6bf3.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83651\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2AB67323834E3BD5E\r\naccept-ranges: bytes\r\netag: \"7BAFE87E09ABDDB8827569DFE782FD20\"\r\nlast-modified: Mon, 03 Mar 2025 08:34:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3374996053104546375\r\nx-oss-storage-class: Standard\r\ncontent-md5: e6/ofgmr3biCdWnf54L9IA==\r\nx-oss-server-time: 19\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUSG4S9tsDNfHGN1Auwq2m1H3zQEuYzHkGSgkgtl66W4qsVI%2BETtMUdZ5ZojwqtDnV6KRuYBkkhD0wZqx%2Bl3s0fOxJrSN6YNWV%2FowJZ13xq73OY6TTAsJxu1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8dcef56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x819, components 3","md5":"7bafe87e09abddb8827569dfe782fd20","sha1":"8b92b2412d41a0f6b3a3566e40a9e5bb50a98bf7","sha256":"4f330ebaeecd9b1d4631a7355ea7893c688154996a27bf00876b09ff5f7e10a2","sha512":"b366982bdb46cc574ee4878e29ca56bbca1aea30770573333975a60f50a211d507c9010621bb832611b3fabca9100ea14b4e0d9f8ae611a1ea72c06b3dea9dae","ssdeep":"1536:4OoA5rQ27So8cyRVk0WF1mvmQm0u0v9ewLlxipaWXI4TLvp:4OHFuopyRVkR5QJeglx4tXv/vp","tlshash":"e08302ee29d63449cb2c527c1a96513f24a7d13a05bcbfc37a098ea18d249d5fb25a02","first_seen":"2025-05-14T12:02:49.133476Z","last_seen":"2026-06-01T04:12:49.396859Z","times_seen":224,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B08M8VQN4L/610mviXgV-L._AC_UL1000_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B08M8VQN4L/610mviXgV-L._AC_UL1000_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88100\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F4CE63A83130200D4D\r\naccept-ranges: bytes\r\netag: \"1223A3494A6D4AD8418A6B92C82BEE7E\"\r\nlast-modified: Sun, 02 Mar 2025 17:16:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15395286707886829886\r\nx-oss-storage-class: Standard\r\ncontent-md5: EiOjSUptSthBimuSyCvufg==\r\nx-oss-server-time: 21\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIZ9zVxalqrHC1dV6NAzNNkTHeBoCan5DmHjqTvSWzZhC4zyVN3EBXv4b6iZxjgGRDZcu521Pin7ZeLYZXPBdJ0syiE%2FJ2IfgA%2FDVnXIkgfGPArpv7gurVqj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef56d5956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":88100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 569x1000, components 3","md5":"1223a3494a6d4ad8418a6b92c82bee7e","sha1":"633fb9127836c0272cda7c43afb30d4ddbd91430","sha256":"e0cb3613e53d3c4d5a93857a43783ce4e179f7b47594324b48f70cdad74147bf","sha512":"9f0854cda878ad1eade234678906ba17568871fb83e36166fa0a71b954105fca69721b91ae0abd699ae4be55e9ec955b451aec56ae3caddf1e5367af82f3d0ee","ssdeep":"1536:zlVLWit1zvHVRZ9rOVzVIGW/xof+M+Npjqur9RnRcVTeYmlnYGJGl2BQAnnY1gbJ:nWi3zvfZIVhWpzrjnBp8aD5y26J1it","tlshash":"d98302153f125d9dc97a2bf219da0e61ec870e420b1c7a672d9be92fb8747d90b2214c","first_seen":"2024-10-12T22:59:54.637184Z","last_seen":"2026-07-23T06:19:40.839607Z","times_seen":302,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-08-12T05:09:18.379144Z","times_seen":6223,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/more_icon.9327cb36.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/more_icon.9327cb36.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"328-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nx-cache: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9327cb36c3f2f8aa02c3375bb2b902ca","sha1":"b7477df5855a9c56d6f73d4770f5f59643370bc6","sha256":"f982ded8e868bab40f1ab23b1d3cf05d0ff847ffff6c591062dab8d2517d2bdf","sha512":"8a827d3ba59948c2f5edaa802dd2de9257ef823c3cd192b672484e0cb54a244a25d99c58ebccbd3f3c140cedda3a9e0e30d4dc3031aa68b114344f5a8cc778f2","ssdeep":"","tlshash":"82e0266050691a1ec1528a49cab17a89246df147c1e99099e9ae200a1db3cfa78ad71b","first_seen":"2025-04-18T11:31:52.95747Z","last_seen":"2026-08-02T11:36:27.422886Z","times_seen":626,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44216\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF7CD23C3236C2D1A0\r\naccept-ranges: bytes\r\netag: \"A5941F987A0FE015714BC8B8CDE4BAFF\"\r\nlast-modified: Wed, 05 Mar 2025 06:41:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9836982712021066183\r\nx-oss-storage-class: Standard\r\ncontent-md5: pZQfmHoP4BVxS8i4zeS6/w==\r\nx-oss-server-time: 67\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Na0V%2FVevCcYWcFpXU7jTqPY5915mN5ltiu4prg%2F%2BPEXzEYRjOCEzEvMW6EviM9k%2FiTPDf4wu4qRR4BDRn%2Bc5ijVqntkJPWfG2UPt42PQEJ%2FKz%2BWl0ZAwOSXy\"}]}\r\ncf-ray: 9b7e4ed978dc0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-12T05:09:18.270435Z","times_seen":9941,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/500b096a-5a62-421f-8b72-59d5a54f1fd6.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/500b096a-5a62-421f-8b72-59d5a54f1fd6.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32716\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2CE63A83833DB0B4D\r\naccept-ranges: bytes\r\netag: \"8EE8176D95CF9D01C48EE0F73D1A4AC3\"\r\nlast-modified: Sat, 22 Mar 2025 13:48:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18207905813605213446\r\nx-oss-storage-class: Standard\r\ncontent-md5: jugXbZXPnQHEjuD3PRpKww==\r\nx-oss-server-time: 23\r\nage: 526063\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9NAnjO66oTFXKgZKlCBjWLHOzg8vxQByG1mjOZruJfU6Gjebj6X5K40uoNaZ6zZ%2BKIRmj4y7%2FTMGbJw%2BEObPoao%2FWgcuCPRHRrh5If4j1c8gacS2zUlEeC9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee55cb856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":32716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 841x582, components 3","md5":"8ee8176d95cf9d01c48ee0f73d1a4ac3","sha1":"1bbb2f55d8c0fbde1fe655555ee9587fcd2ad24f","sha256":"c1b23042250a3a696e5dc295331a52441dede1bb2e1c435488297343c5eef55e","sha512":"594bef4a53a773f77f4215a46174487466f6666f027b24e99428776013bc05690d5cd78524b360fc68c1eb3f439fdbfb14717d191301029fe105a62d11fc6491","ssdeep":"768:ad1EHL0khr9NPxMTplL2yMJPpM1w7m85zNhmr:ado0khrn2tlKyMs1w7mCur","tlshash":"b5e28b79abebd300cd1f2530416653b11243dc9482d393332539af6cf26e6fee82a619","first_seen":"2024-11-28T13:33:20.938067Z","last_seen":"2026-06-01T04:12:49.48027Z","times_seen":213,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2025-01-07/b83fcef7-f8e3-45e5-8b89-c2d29e832aef.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2025-01-07/b83fcef7-f8e3-45e5-8b89-c2d29e832aef.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41457\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB6732313179BD5E\r\naccept-ranges: bytes\r\netag: \"6573E07F3D8899C48EC4D96C7EAEA83E\"\r\nlast-modified: Mon, 26 May 2025 07:40:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8788344813387400309\r\nx-oss-storage-class: Standard\r\ncontent-md5: ZXPgfz2ImcSOxNlsfq6oPg==\r\nx-oss-server-time: 16\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erNvyJjG34I3WhBb8oWJYBQe1iB1%2BhFfY0HQOnBx6iTi0TcFRihD8Sbn4bsVRKZlS%2B49qaU7QK96Tl9rcu9iN6QeCjQRtJwDAhTZeErQUKPdWJ9U31r02YdT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee56cba56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41457,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 858x690, components 3","md5":"6573e07f3d8899c48ec4d96c7eaea83e","sha1":"4476af4527c7c6a413b9150eeacbe9a6cc591ddf","sha256":"d11ba7904d7b320d72737518bae7a3b08e62af68cdfa1da46b6f3de2cef6c84a","sha512":"a177bc283f30e7ef78d89d2db4081ee48e8d1f61960dcd409474ff61993d0df88660210e751dbd564fb7a1a0862bb9dd5b94895806f2f797cb5244ec8e785db5","ssdeep":"768:9WBu86GDuSD8HDZpZhSZTOwsnpetZSHK6SBMPbmsCJWyd:9WsKqS8HDZHSO1pUSqJMKsuvd","tlshash":"d013d05cf12356cff628c03241deb291642a3ad113aa3a9e615ec1fc853d3b18ab5f35","first_seen":"2025-06-10T12:06:59.276869Z","last_seen":"2026-06-01T04:12:49.489137Z","times_seen":207,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B06XPJWK7L/611NS0z4RKL._AC_UL1000_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B06XPJWK7L/611NS0z4RKL._AC_UL1000_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74055\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1794D103534AB2E70\r\naccept-ranges: bytes\r\netag: \"B51545B5094D4E93C7193025C678BAEA\"\r\nlast-modified: Sun, 02 Mar 2025 21:38:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15617224719424272623\r\nx-oss-storage-class: Standard\r\ncontent-md5: tRVFtQlNTpPHGTAlxni66g==\r\nx-oss-server-time: 71\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toFnhIBAUENfQYhDrKvcExTooQuTLk0bCEDRdvai06RY%2Ff0h0yQn85oCVigGrJv7TSBR2AaR%2BDIZdqv5tRU2Du5Bc79tlvMH56sSyJasdmIX%2BpJH9z%2BQshRe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee73cd656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 568x1000, components 3","md5":"b51545b5094d4e93c7193025c678baea","sha1":"538bc9520acf783ae30eb939bb04a1388a7959c5","sha256":"72a61b7fdc2660bb9f453c2df50ad11f53855979dbdbfb5e95c561b77eacb685","sha512":"ca49a56c80a337be9fda8d5d77d0d5911b5484b933e84bf28d48735f00c59a0edc5be269dfce4f666093d2f335de97b299c862ce607305e126cccb017285e0da","ssdeep":"1536:hkxNVNFgI+DG6ta8XkesdGZhzSDsf3nfQQPZsZn7xp2yuK9smkO6QCOU5i/qApS:YNVNZz8XknSS4fnfQtxxuKSmkiGcDpS","tlshash":"e27302122a947c2fc5dbd5bdd3c1c3af2d11c2b29203c9b2d4489540a9b9b69399fb3c","first_seen":"2024-12-14T12:37:34.453866Z","last_seen":"2026-06-01T04:12:49.463626Z","times_seen":232,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp/B08RDTF7X1/51L0lBZFteL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp/B08RDTF7X1/51L0lBZFteL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43750\r\npriority: u=4,i=?0\r\nx-oss-request-id: 69540F608B90443635EA4D47\r\naccept-ranges: bytes\r\netag: \"2D6862703EA9D7530C7AC298F5A8B930\"\r\nlast-modified: Wed, 05 Mar 2025 13:24:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15105269813694944043\r\nx-oss-storage-class: Standard\r\ncontent-md5: LWhicD6p11MMesKY9ai5MA==\r\nx-oss-server-time: 22\r\nage: 282754\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktE5UvzzFPcUvoz80Olsr9bk5O2E1%2FYYmr2yfkwCy5TuL6vMde4QhmGi7jcaKSnbuC5in7vplGFywFBFyDPzLYoA0IqlSrA5%2F8EjpQuPeXxAjWubc86Q7HjC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee74cd756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":43750,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1346, components 3","md5":"2d6862703ea9d7530c7ac298f5a8b930","sha1":"56c8ef3b34ef49309e784dfd76cdc2ab01a08e79","sha256":"433afe3533d0f22222a7ae320236dc21d26737f0e66dda716f03b481022ab478","sha512":"3805584793cbe32c7824159732cac48421ab003b21241c5393e759d69cba3cb285a4037d9c51989a594fbb5d204a4406c2330a57b7f1e2ba432afc3b88d34257","ssdeep":"768:1Tmlxr1KvOEIbmwN4S5952xShBI0qqVAd7cEgYsW6Ovr/TSr7v+2E85iPbWlEHX2:Zmn1KmEcPyirxBwq4QEmOvrLSX+mYqY2","tlshash":"d013f28e83cea617cbc67b709a0a41e5af67890e5634634f44277d46e74deca0ee240c","first_seen":"2025-05-14T12:02:49.217766Z","last_seen":"2026-06-01T04:12:49.460675Z","times_seen":224,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/head-icon.a9738a5f.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/head-icon.a9738a5f.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"575-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nx-cache: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9738a5fd45ccf2ff907f62e01f45f23","sha1":"7818099d5e641ce71fb8229c8693f04bec31b0e4","sha256":"f9ffdbce80e0f0e8322c6d5448a3db1564d0749d6e7cf782ed8aa4747d18dd58","sha512":"3464788d812874daf73d8820ce9c0e1fff733b421e8ca4f50bd729f8a04224cc926a024a2320d4d959f610a21215f15b3c0fbc4fe2c342c0c9146a2990e4341c","ssdeep":"","tlshash":"b6f0eb0f33560e2cac6ec386d72971741122a2c7b38c221ee92a0435a0065deb42369c","first_seen":"2025-04-18T11:31:52.998251Z","last_seen":"2026-08-08T10:48:35.706765Z","times_seen":637,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B08YQNL4YF/519zLRryIGL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B08YQNL4YF/519zLRryIGL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28569\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F17CD23C373912D3A0\r\naccept-ranges: bytes\r\netag: \"18AD896A96F75916EE9836ED85918D52\"\r\nlast-modified: Sun, 02 Mar 2025 14:47:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9983165932014015110\r\nx-oss-storage-class: Standard\r\ncontent-md5: GK2Japb3WRbumDbthZGNUg==\r\nx-oss-server-time: 17\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpTP9FXoEOZL7RaJTE%2B9LTSscAzJRPwZORa51UF7ampci9rrcfldbwcBBCQlBcguzQrh%2FAPT7lqSPzzqZhiT6fKq7pXySLstiNOc646HPxDtjpHoyn54cTWC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee75cdc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x548, components 3","md5":"18ad896a96f75916ee9836ed85918d52","sha1":"de594d2de7e81cb479b035d82e8a9dfd6e1165ed","sha256":"4e5d2ab82fdb58a9b49243131f8eeeac1b104636cca1ae33dc19082eea0ce146","sha512":"f39e1d571b57158c60cb54add63b0dce85829c6c25005bc4b99c57068547ed471e577e0f9aab6da92ab3258bfb6ff2d3ab397b363e45af4b50047cadb6d793ff","ssdeep":"768:1xFWm/FpByigjaj9R4idtx3+mA90Eh6pwlPVZ+Y+WLg:/9vgjaj9R7NRY6kfg","tlshash":"b3d2d1304ffa5253d10079b4040d3bf47912d986eed67c6722b91b39fa26dd2ca275b4","first_seen":"2025-05-14T12:02:49.117412Z","last_seen":"2026-06-01T04:12:49.50526Z","times_seen":224,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/6d2f97cd-472d-4bb7-af2a-5a817b50d801.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/6d2f97cd-472d-4bb7-af2a-5a817b50d801.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56888\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2E6135835370EF622\r\naccept-ranges: bytes\r\netag: \"DB60B04217A5E32E1D39B781AC80D263\"\r\nlast-modified: Thu, 06 Mar 2025 13:49:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13474943912478740056\r\nx-oss-storage-class: Standard\r\ncontent-md5: 22CwQhel4y4dObeBrIDSYw==\r\nx-oss-server-time: 17\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BORcwwGkp0MRkZQbAX4PeKx%2FQBSvBj%2Bz2LG%2FAjwItmAqxd4oHx8CFIoD9qvBlmroWOsoafq3YC5w8r8nJBFwpbipbLkIPnTyXDWLGGm54E9Ko79h35A4oHLa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ace756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":56888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x769, components 3","md5":"db60b04217a5e32e1d39b781ac80d263","sha1":"14acd78a6c61222f9398b9fd41d62c9fa795b36c","sha256":"e15f9e7cd73d6bc148011b4001f8d0797f9fda1173733ddefefc4ab1aac29994","sha512":"e97d67943f6ca4124451d38bec9cab564c00511d56674d9b58ec8ad4ab4ef03d350e5bbdc9e7a0ddd10882c274a48a885857cba818dad98ca22ad89e478f0035","ssdeep":"1536:x8mrFQTrLgctCUXrZblOmOV1NW21oz/BwV/31vz:xv+T/fU8ZZODB2zpSlr","tlshash":"0f4302cca3991d8ace787c3601638fb7eed68e3859749b8680e66c1599b0b1310297d9","first_seen":"2024-05-15T17:00:32Z","last_seen":"2026-06-01T04:12:49.477118Z","times_seen":254,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/ef5200b9-2ce1-400d-bb03-4c10ab12cfd1.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/ef5200b9-2ce1-400d-bb03-4c10ab12cfd1.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91169\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3C78BAF3233E3A4DE\r\naccept-ranges: bytes\r\netag: \"C06D4014EA1ADCCD3030372C3E7D23FD\"\r\nlast-modified: Mon, 03 Mar 2025 01:56:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17604030070601074943\r\nx-oss-storage-class: Standard\r\ncontent-md5: wG1AFOoa3M0wMDcsPn0j/Q==\r\nx-oss-server-time: 32\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGgAfyffZ2fJ1RT0R0yhVqN7g1YhF5KvC%2FOYkJzvea5Yy2xDfLzbD%2FSA6jQ9jQjDocg6BxdAR8oGEv0HmHllG%2FHkCnboyGoRhsVlxgDr4XfVf6nKD60nk%2Bne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef54d5256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":91169,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"c06d4014ea1adccd3030372c3e7d23fd","sha1":"702eca9b4a1c84a5c43ed944f1521f70bedbac34","sha256":"e53b0846737151a07525421e57eb936297604297258f7875e30242f48a5878a2","sha512":"936cbf77fb8c02e9df26d12e7ed75c917673d39eddc72d5bf24f873f017a5dccba1bd9461407aef8cb7a1fe8e4387f37e8d766990b3ddb1015623010b314cdbc","ssdeep":"1536:LcSi6sGGxP7qyz2p/vgrVT/Cagl2/FwphMbg+q6/t0JEnYvrXIxdyltLAt:LWfJOq2p/vgZ37/ip1+n0oYvrX0doi","tlshash":"a09302a70ba2e9d2cc7979340e8f47392d97d493b2c5bb862f631e15376b6f03905a04","first_seen":"2024-11-28T13:33:20.895473Z","last_seen":"2026-06-01T04:12:49.437257Z","times_seen":252,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49034\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF4C8B373738EDEB3C\r\naccept-ranges: bytes\r\netag: \"6A85F34AF56B3C034D5137D4EC807895\"\r\nlast-modified: Tue, 04 Mar 2025 07:04:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13855799573892825027\r\nx-oss-storage-class: Standard\r\ncontent-md5: aoXzSvVrPANNUTfU7IB4lQ==\r\nx-oss-server-time: 1\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KP5XB6075pVGMYvmUSEac5RknBelp8oXjRUiWeBCqr6QaVgwrkS4LmeeNwTZoB30CwGTcT54R%2BXardwGs4BiG0F2%2BhJL7IcW80uWxnNFj9NvLqL%2FMbNWkRYy\"}]}\r\ncf-ray: 9b7e4ed968da0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-12T05:09:18.315143Z","times_seen":10069,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/collect-icon.c585fa6c.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/collect-icon.c585fa6c.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"498-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nx-cache: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c585fa6c5a6901824eedccbb7d4913d9","sha1":"927cc7881e92d4967898141138f07cdf5aaaf968","sha256":"7d8543cbf255fac5b23bdf30b6f91d6ab7f4cf50a5f068e61b1955cab518946f","sha512":"9456ce4c24c7274b5c648642ed55bedc6f56f3cf9d61e948fb72395dc04ccb043e21eff0974cbde80023a33da50454409def46cd4731ba54630a03029ad97d61","ssdeep":"","tlshash":"a7f00e2352302f2ce92b07d4d674f57a311b904380882224fc362334b8b8b8ab46b888","first_seen":"2025-04-18T11:31:53.06981Z","last_seen":"2026-08-08T10:48:35.749685Z","times_seen":626,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/4508bd88-e040-44a1-9e4e-1694d288a92d.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/4508bd88-e040-44a1-9e4e-1694d288a92d.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81415\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3ACF6C53730B1D680\r\naccept-ranges: bytes\r\netag: \"C57018EB42A71E86F96633B8FC4215BE\"\r\nlast-modified: Wed, 05 Mar 2025 08:14:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10184482719053767888\r\nx-oss-storage-class: Standard\r\ncontent-md5: xXAY60KnHob5ZjO4/EIVvg==\r\nx-oss-server-time: 19\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnQ1tT9CvlaQk9l7zb1ZEKnBKIrRZ2OTPy7ED14F88KW31W9VXBBXHYtau4TPJnT9qZtR8XzT8g9CGnFxsyAu8107%2Bpi1TsdcMVL0idXKDp%2FDxUtnGTWDJe6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef50d4956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":81415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1001x1001, components 3","md5":"c57018eb42a71e86f96633b8fc4215be","sha1":"584aca846a0402cf93a65e503af09420a6c7ee72","sha256":"a0d31232299f58fd9b0e50ab77fa7d28a80201e28a96086aed3f262598329074","sha512":"d290a86bf408e201188364bcf0d7c6af4fbc5b49041021cff2f9d2ab25f592c1149e7edae1bad273a9fc19e9ba10fc1514e3993f9b9abcea8752f36697d15c6a","ssdeep":"1536:QSvEldEbtuKl0Hrloa+BqzBDk6ggxuWRZhCxBbBIHbwDc8Inewn6V:E/Ed0rB117xuWLhCx7Isuea6V","tlshash":"3a83122642a07fe6b47c5162b2fc0edc5b15a439c13d6ddb7e12140a9607c726af8ec3","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-01T04:12:49.413773Z","times_seen":289,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/css/app.5b7e70ec.css","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:28.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/css/app.5b7e70ec.css HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"249431-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bbbaf60d5bfe18e22b8ef93ee4d44ddb","sha1":"4afdafca8408f48b4252a03975e972d127f043b3","sha256":"041799ccf82ebe257ccb2d7b35eecb5d89d779fe9d836423e825a84a3d8648d3","sha512":"28fb3bfe11eb3616e2195793ae65a76bd4b1093ed14700780c81a5d7a7ab12d8f67c405a43b042475b819fe16b4ca467cd638a3b381430f0b36d56e53c7aaa87","ssdeep":"1536:/SU2J6mdoTW+9+o+q+2+PgS28Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6y:jbTW+9+o+q+2+Y3FJWTPL4Q+05q2pe","tlshash":"c834b620db17213b222be66d75c0b9896f28c313d9725b7bfe99741ccad64891163e0f","first_seen":"2025-12-21T03:27:03.647514Z","last_seen":"2026-07-17T17:41:48.643725Z","times_seen":266,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/store_add_bg.af26b6b4.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/store_add_bg.af26b6b4.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"276638-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1531 x 400, 8-bit colormap, non-interlaced","md5":"af26b6b4ea76ae28fafc65d5a6b3fe83","sha1":"259d474271e5c4140adad0739716fd3abc75d8b2","sha256":"dd228c66b2155fa001c4d527d8ccae565c954407b3b98761a6c08aab27c8fdf4","sha512":"bdba2943bc08d0aaa69bb267c79330e5b33b9ac24a6f0192799af17f88b346c803ceb5b173d1d77c675c915d92e0f80e9a6c277a46d77af41bbe6658ca8c6fae","ssdeep":"6144:wv/bUDyaizGH9lChCf3jRjdb5C0UzeACeE1zfuWmYV1GuUABtd:OFzilOazRJbya0E1TLtd","tlshash":"974423f8a2dbfecd44afc7038ee8904084535147194f5daab14f849ad52e963487e3be","first_seen":"2025-01-14T11:35:46.472417Z","last_seen":"2026-07-31T22:21:48.304248Z","times_seen":532,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/seller!list.action?isRec=1\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:33 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28766,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (28714), with no line terminators","md5":"b839ef6e933cc8bda71df0d004fa673d","sha1":"7221c1e3a353c1d14aad7b6c69d05596ddebd56d","sha256":"d342eb46700ecdcae99603fa5f0575eac6868d4df8d7627110176002d839b564","sha512":"f0c503c8d33d50945015ce4b9f499cd018b91229a9606f1a9496a11f05d7acac8068cef433da1f39aae70724c2608130281e3ad3aaa5465514e4d6efe61b0b92","ssdeep":"384:5qExmjxyxUz+Hc/YLBRG7q++QwUabviPMSRI1zF5g1A+kCcIQ3:5q9ANegdv","tlshash":"fbd2785a2bd43e736b190e623d077e85db5c02df4d424eb1db8ccf1a29f86b1960e660","first_seen":"2026-01-03T00:17:22.313838Z","last_seen":"2026-01-03T06:39:42.710052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27057\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF794D1036330D2D70\r\naccept-ranges: bytes\r\netag: \"1B8714109AC1C300A6848B18F4B10531\"\r\nlast-modified: Tue, 04 Mar 2025 21:34:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9189096475363944196\r\nx-oss-storage-class: Standard\r\ncontent-md5: G4cUEJrBwwCmhIsY9LEFMQ==\r\nx-oss-server-time: 98\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DiDXsWE1iltdD1g9r6u6IWV6QuiLNYvjPsgOVklbbJUOeaWURPNpF1ZwjTAjS5I6fSvN0N0XWa6IYSLLbHHB4WbXR1owXwx%2BmHDGmJAJS%2FDIzBsjZb2oFwy\"}]}\r\ncf-ray: 9b7e4ed978f20b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.368151Z","times_seen":9742,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-12-03/877585b5-1865-4bb4-a659-7eeb93c75939.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-12-03/877585b5-1865-4bb4-a659-7eeb93c75939.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 70206\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F0EE240038388D0546\r\naccept-ranges: bytes\r\netag: \"5FA35387F56B6C5853DACAB5F2F87242\"\r\nlast-modified: Mon, 26 May 2025 07:39:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7076986540443960530\r\nx-oss-storage-class: Standard\r\ncontent-md5: X6NTh/VrbFhT2sq18vhyQg==\r\nx-oss-server-time: 24\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBkyDiy782f5Wt0of0c40XU8yVqs4efS%2Faq0micOaDuW5465r8guqo5QSD4x8QPBFSTS9NrKgl4%2BP1hsiU3naa5yK%2BjExeWlK5uM0ykVFd2%2Bvy3o%2BWisiNg9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4ccac56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":70206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 416 x 406, 8-bit/color RGBA, non-interlaced","md5":"5fa35387f56b6c5853dacab5f2f87242","sha1":"766674e0ac33dadb099bdf2966ef8ae46e0269b4","sha256":"5d5d7a74ba54a1f60c9d10409b78c2bca6c3f1abc2f63f20bd0bd03bed0a824e","sha512":"03fc33f494b14bfedee16e8e4cc02ea2af257a3ad01c763553d8ac8bbe2ab8bd945dd5577dfe3ec044d34f7e0329ea9613f09a8cc395b6c8dcc6900fe606e93d","ssdeep":"1536:xKWV/d+OaL0jDmOzw6W1SQpnyJRPN0zKUBCvQtP30DZLf2NPUPdBPL7:cWQOatO06WX9W8OUpR0DZEPuB7","tlshash":"226312a64b6cbcc8a0bf8963826e52d5086d4d70df0e5c4c7f4526fa2c11cbbd133699","first_seen":"2024-08-11T00:56:07Z","last_seen":"2026-06-01T04:12:49.420821Z","times_seen":231,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2025-03-19/f14f52ea-3949-434f-8af0-26d8c376240a.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2025-03-19/f14f52ea-3949-434f-8af0-26d8c376240a.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 107634\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F0AB67323534E1BC5E\r\naccept-ranges: bytes\r\netag: \"02D621BCFBDD659A8D5031F371872099\"\r\nlast-modified: Mon, 26 May 2025 07:50:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9921935092531080117\r\nx-oss-storage-class: Standard\r\ncontent-md5: AtYhvPvdZZqNUDHzcYcgmQ==\r\nx-oss-server-time: 39\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWHXlAXJ9L0wHL7Y9ik%2F0cQqQZjgA5RQRpjJlrBBjVrMQsEDx6R%2BvzuDyO%2B6kXppfmZhrJWkZ5xNcoJL0S6BWmmRBQvBZH7VG%2Bbk1cCqhmvMF01a38rha5LN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4dcad56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 778 x 622, 8-bit/color RGB, non-interlaced","md5":"02d621bcfbdd659a8d5031f371872099","sha1":"3c95bc8ced5e90ae1e796d88d13b7bf5379c9322","sha256":"2bfa890da527f2033620ddf9054200c1e341b39f33aa542f1f0ffbd6ffa5bd78","sha512":"b39277f98207c27b31d43c509f123c32244d153a43be5b19c041b34a21b092e788f494aa9dd5e7e665b630689da76cc04083a880135a042e476de15293e1ecd9","ssdeep":"3072:kFOW8opYotmvg2HEczue5fPcxiVarVy9Kv:OmU+h7MxiVky9Kv","tlshash":"62b31260d00769897e5daa25e9c314e6748a054b7f188c6ff5d8c6ebb885b20f1d2fe0","first_seen":"2025-06-10T12:06:59.336984Z","last_seen":"2026-06-01T04:12:49.506711Z","times_seen":207,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/87888e55-ce67-452a-9bff-65eb49e18e97.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/87888e55-ce67-452a-9bff-65eb49e18e97.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8443\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F068F5793633B5B84B\r\naccept-ranges: bytes\r\netag: \"92E89291B06FD545CBF8672BF33D7689\"\r\nlast-modified: Sat, 22 Mar 2025 13:40:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14005427438335609502\r\nx-oss-storage-class: Standard\r\ncontent-md5: kuiSkbBv1UXL+Gcr8z12iQ==\r\nx-oss-server-time: 23\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJ0vhnFOSmVLf1o4aFT%2FkCFpYd9usTfHp8%2BK%2F86eslCabxhJ%2F2Pj5RB44knTUSU9hzraKkq90IuYSqcIgQj3WqNCQFxUd5pyJPlPlSD5CvwQzlqH9ke5in5v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4fcb156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8443,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 278x188, components 3","md5":"92e89291b06fd545cbf8672bf33d7689","sha1":"d1e15febb4b4fa6183466db6479fb3e46d0b9664","sha256":"8600fbb2d9120b610ad0e63a8dc0c66231ba3a2fe246304c01e448e961470bf7","sha512":"8e9a02e0ac6062be1c253478d3abee029a6a3db2b6a175cd6a1124fcf7ce9405db6bba3ee5ef3f62d15b09c06f4231cb32d571cfec0768e5d5aae78ab9a4d165","ssdeep":"192:ouHcGZtN4XYVGUrmWBv8ldpTew+wHkGpIoUJ1RZI7aZkO:ouDR4cGUiW8dpTeqpIoUnRO7aiO","tlshash":"6402aee276657316e424c4fe61165e8347941f6a4f42833ef3e2a721012d52f9cee1a9","first_seen":"2024-11-28T13:33:20.898268Z","last_seen":"2026-06-01T04:12:49.428533Z","times_seen":213,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-12-01/2de97477-2ca6-4db4-9fb7-98d3ba96f71e.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-12-01/2de97477-2ca6-4db4-9fb7-98d3ba96f71e.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46917\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1E61358323094F522\r\naccept-ranges: bytes\r\netag: \"8BC21B9E892C9D0EAEF19F46B9366F17\"\r\nlast-modified: Mon, 26 May 2025 07:45:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17330992212151165892\r\nx-oss-storage-class: Standard\r\ncontent-md5: i8IbnoksnQ6u8Z9GuTZvFw==\r\nx-oss-server-time: 47\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Jrt5PHRZ%2FMOfXLXJVT1ljI38XJJs7qEF1Py%2Fuu7SxYrezuRMnr6JuZRJwuig4dOAUc%2BSMRMUFXI0XvSSdWDPhfzmgFdxZAHMK52TZp6lVmfd7qXnOzU7Oco\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee51cb356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1202x948, components 3","md5":"8bc21b9e892c9d0eaef19f46b9366f17","sha1":"c7e50613c87a2307f5327a8f1aec2436ca6b375e","sha256":"db390a1eff2a01fe53804a02cc5332789baa77ce45faaed40e8f049809fda4e6","sha512":"8fd105070259167afe0a65d5c1df541aa0997a4169f25b6ae9a025e0d3b0017d7c0ba3ee8312a1129ac1f0859bd107f7c016c3b31450a8744bb45dc899935bfa","ssdeep":"768:SO2CleGG1XYVxzwy0Px9MVYzwO1W0UqF74dbf58v3QQSQR8ptuMI/EvES4o:92ClDG1oVJgf/1eqF0x8JJROI/Euo","tlshash":"fb23e057ef137d27e114a23158df9360278b6f91ec89c18eeb6060c249bb388ae4749d","first_seen":"2025-06-10T12:06:59.323505Z","last_seen":"2026-06-01T04:12:49.512012Z","times_seen":207,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:28.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-ray: 9b7e4ec44d33b4ed-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"613fa20b-28de\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1193311\r\nexpires: Thu, 24 Dec 2026 00:16:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hpF2CZpLkaI2R999Q13n3tDga%2FhmPjV25F%2Br%2BKQkCCnDtQi1tPIJ6I0ddRdVH0RohDobXLSmLRQ1URI2BpRR%2B8ZDO%2FJL%2F1KZ%2BK5%2F56BNVYuwQkGZgreDOc%2Bm%2FQHaBKBk1Yj%2FVE%2Fj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-08-12T01:18:04.439802Z","times_seen":47531,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com//24319d40-685e-4667-98c8-767d73a6c5ce.PNG","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET //24319d40-685e-4667-98c8-767d73a6c5ce.PNG HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1362971\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFB1E8233933DDBC4C\r\naccept-ranges: bytes\r\netag: \"955AEC91ACA4159AE79B81779EA8F2D9\"\r\nlast-modified: Fri, 29 Aug 2025 08:19:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7948851141258234471\r\nx-oss-storage-class: Standard\r\ncontent-md5: lVrskaykFZrnm4F3nqjy2Q==\r\nx-oss-server-time: 30\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbEgxt9a3ZuPp84o0g9Ox4XdZly8zQjcOu2xKtdJpSeS2qHr6VvdiV24iyht7y1HoMzqLFb2wu8mt6hl3tDnWZywAzVQayIMr07BsLHg1uG3IH5nRuJdQ5rG\"}]}\r\ncf-ray: 9b7e4ed978f50b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1362971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1914 x 574, 8-bit/color RGBA, non-interlaced","md5":"e7e6e0141cbbf3167a30ad2ac489a6e0","sha1":"c002bd5536904916279fffb962d56b257702775b","sha256":"252e6eca47f1bc02433798a519ad18c24c32c7c842fcf7242610dad42914cd08","sha512":"476ceaa225dca963ef79f43219188e351dd0c31ea69d1117a0c87251b7647ad0c298b09aa5aa15275f6a1fdd152b302a23f49f22dd7d388ed542f0ea2cf0cca5","ssdeep":"24576:oqFPKSV3c/ToFDjWvsA8lDT/HMhJSIwARwDLVsERFO+KL2:BFyP/MFDqvaXsh0IJUJra2","tlshash":"bc2533304535193d08a2d91e4d689f851bd2ec4a666f723f2f24f75b7bd86c00a2ab73","first_seen":"2025-09-11T08:44:21.78208Z","last_seen":"2026-07-17T17:41:48.616377Z","times_seen":397,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":89,"dns":0,"connect":4,"send":0,"wait":14,"receive":360,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 147078\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF93A7E93536687E51\r\naccept-ranges: bytes\r\netag: \"E1D0A17B2EB5865BCCC7DFF6330F6562\"\r\nlast-modified: Wed, 05 Mar 2025 04:54:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2021799680986804534\r\nx-oss-storage-class: Standard\r\ncontent-md5: 4dChey61hlvMx9/2Mw9lYg==\r\nx-oss-server-time: 18\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWNP749qyhTmeGA5odAqtFp9UqYWq1udZGMivXyS4oDy7TWvsCrK641EjHA51ej%2BC9wWMndDELTinR2%2B%2FyWS6ioe95HTFhAPtxKl2tAPIzg2X6ggwKSt%2BF1r\"}]}\r\ncf-ray: 9b7e4ed978e00b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":147078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-08-12T05:09:18.254791Z","times_seen":9418,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":14,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-12-23/5d18b31f-739d-4cd9-bc88-9add921d5dfe.jpeg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-12-23/5d18b31f-739d-4cd9-bc88-9add921d5dfe.jpeg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24792\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F17CD23C3030F1D2A0\r\naccept-ranges: bytes\r\netag: \"8300ACC34CA6FBAE075D7363F0A7C26E\"\r\nlast-modified: Mon, 26 May 2025 07:40:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2022097142588824259\r\nx-oss-storage-class: Standard\r\ncontent-md5: gwCsw0ym+64HXXNj8KfCbg==\r\nx-oss-server-time: 58\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWofiLhMwNnF5FF4obntg7UySJwhJTKD%2Bf1FPJkkITjbTg8WJrQ3epm%2BMZKiN%2FYu9N%2B1O8n6NquppIORM1WuIIxLj%2FiBd748PRITFHJXcMBK%2BgCs8lUjziFI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee53cb456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 418x326, components 3","md5":"8300acc34ca6fbae075d7363f0a7c26e","sha1":"9c095d4458a45b25f1e62351e417c06a3c979572","sha256":"0edacff182f160fecdc211444793fc61ce4c49345a32b09660acb9208b1de27e","sha512":"1bad0302efc7ca70dad891d4389d292b33fac3f8b32bbef020d10a399102853325c8b74f2458c3db0f5f40df428fd90774c7cdd517f5b28d6247f00c371bad7e","ssdeep":"768:CrF3+8vD+jMhxurIVdEu6QpqGOMRVzce+CmNL:aF3+8vD+jMh4rIrEu6XMRR9+CmNL","tlshash":"58b2d00aa117d355f729e530a35f1337ad5024fcbb6605822aab81f775293c6998e3c3","first_seen":"2025-06-10T12:06:59.341975Z","last_seen":"2026-06-01T04:12:49.458445Z","times_seen":207,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/aceec17d-e037-4273-bea6-0e7535f6c7ad.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/aceec17d-e037-4273-bea6-0e7535f6c7ad.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 14112\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1EE24003330020646\r\naccept-ranges: bytes\r\netag: \"B549ADF73FA7CD18E70AE43469306B63\"\r\nlast-modified: Sat, 22 Mar 2025 13:40:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5873990666513226437\r\nx-oss-storage-class: Standard\r\ncontent-md5: tUmt9z+nzRjnCuQ0aTBrYw==\r\nx-oss-server-time: 14\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N79kFi5go7y8r3aB7wTd6DENZa1tLiYdePHmVHMiQ1bQRt3UIhRILFSvWc9VwVIaeG2%2Fvq5WZXog04mRK2Jp7uWzpPiKU0ufRiTiGj5ok%2FJNTPvDQVuMFhz%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee56cb956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":14112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 240, 8-bit/color RGBA, non-interlaced","md5":"b549adf73fa7cd18e70ae43469306b63","sha1":"fcfefb6e05e7d8f0e0644ed71ecb76ff0f752692","sha256":"88b3d453b1146727dd260ab79e1c5013738f7915b5d50f7d68da08622c98a384","sha512":"e208095447c0da2b37767e955ba5c0a3303eb2460dc06d1f53b5eb427f09c398637925d91ff12ba9c6534558157b2eb6aa3ad45aeaf6bd2e843a550c42baf6c5","ssdeep":"384:DB0JqmdJ2riw9C46JQ6SMURWIcFKk4dfZQuz3:VFmdcrWv/IcHYf7z","tlshash":"30529dab21d701a2d9118f55db7b806442d9d02b3efd8416d974be23f9e18b8873c2ca","first_seen":"2024-11-28T13:33:20.941474Z","last_seen":"2026-06-01T04:12:49.512925Z","times_seen":213,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B07VFZWQJB/71nmbzzlUoL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B07VFZWQJB/71nmbzzlUoL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64852\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2CE63A83533980B4D\r\naccept-ranges: bytes\r\netag: \"92F85A7605B0B4190C25FB9669672EC0\"\r\nlast-modified: Tue, 04 Mar 2025 19:46:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12065276076554721138\r\nx-oss-storage-class: Standard\r\ncontent-md5: kvhadgWwtBkMJfuWaWcuwA==\r\nx-oss-server-time: 16\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38LQq%2BFnfS%2BOX9749W1Dhr%2FgNmBm8YCcffKYNbROW2bgz3iTt%2FqtFQwFk0h6pf0AT5T0FWfLwASWE4ihyPw%2Fe%2Bk1QI8BKF%2F%2BnvweytMevMSg%2FF7loNnXhj4M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8ace856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":64852,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x489, components 3","md5":"92f85a7605b0b4190c25fb9669672ec0","sha1":"6756c4402d910227ddc952d7880604ddcebef571","sha256":"ecc4127e42ceb0e5ac0ac23bd9dd4df37208fa22bd481d10bb9bdb9a4785df53","sha512":"42e8eb3866086090fbd343e368b6c8295dff5c6028edd019d3b8cdaec2fb82394849f095a574870202e677a156eb9978ca224e2adafac7f557f2cb4392033739","ssdeep":"1536:nUNrpNoWQ2y47xSQRLwx4fzuLVF07mEISYkYkrW2GHj3Qv5:Ut0WQ2ycLwxEz6AmEjYHYPx","tlshash":"0753f1b21701d908e4db1e34c96f91560b271e0fa4b7da2aa311f21c3e63d159dbed2c","first_seen":"2024-11-28T13:33:20.846661Z","last_seen":"2026-06-01T04:12:49.417518Z","times_seen":250,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/ff842bd9-4e7b-4176-b4ba-a0201bce2251.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/ff842bd9-4e7b-4176-b4ba-a0201bce2251.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28390\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F293A7E93530F37F51\r\naccept-ranges: bytes\r\netag: \"ABC196B746796A3CAC2FE16BEF6958E5\"\r\nlast-modified: Mon, 03 Mar 2025 19:48:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3794896971903872523\r\nx-oss-storage-class: Standard\r\ncontent-md5: q8GWt0Z5ajysL+Fr72lY5Q==\r\nx-oss-server-time: 14\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8q2hXO3InhxUPq%2F7uz6lCvDO5aP%2FqmhDLtSLRQSIHGHETFrJLB6ja9jkpqcsEexcf02vLiHnQH%2Fm0VE8P9wSVEBflRGY1%2FrRqI0ftsaBaDlydBQbZ8QP5paV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee89ce556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1025x898, components 3","md5":"abc196b746796a3cac2fe16bef6958e5","sha1":"852655d0ae16bd44e91551514a8ccd40ba0e9f15","sha256":"ac01d395ef7fdf45c433af4f2b3f02b65f0af1b18b9a423ee4e5a56f4140b990","sha512":"7df3195880aee24af0ded4a6ccf835ac71efa5a435dab62609a69b2a198fa134e8d7f264a4e3998eb485662183d18cb39f8db58e87e7ebed43d411a22bdc2a3b","ssdeep":"384:18QvkD/rbscjOz+aNFvpvje1bFlhpICRhbrnNajHXDYr3f06/MSRRi1b+qLT3oDy:18PHybExl4CYWtRKXezZ1M2wfQsWMAk","tlshash":"b4d2e1075d30936bda3823b042708423b152cbc5647a9e7836e83e7bffab1d614c92d2","first_seen":"2024-11-28T13:33:20.768095Z","last_seen":"2026-06-01T04:12:49.473078Z","times_seen":250,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/app.81d35db4.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:28.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/js/app.81d35db4.js HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:29 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1894532-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1894532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64758), with no line terminators","md5":"a7979d7622a327ca5072028c497f515e","sha1":"6bb44298486e8fb3c8f8fb36cd8804fb2fdb2068","sha256":"db62f3659ed310ee8cf619ced5e4ac5d6dd262ee23af6994b499faf7744cd16b","sha512":"9d57b4a2c4ed0452d3b49e7a0079ecdcd1f5f8952fbced3fd9ff7c7c9640d2fa22bae79021c2d684b2ad9796febcce2d70f6ae1970e5df2ba4481e5f1f74886b","ssdeep":"24576:kNyf53IMd2FRTeeCB8ObRNmikMU9EZGt9:kNyf5YXFRTeeCB8ObRNnkMU919","tlshash":"a1557c4ad7e763ac0ce531c5388a3bf1339d04b6d7a68cff4af8c45422fad60615aa45","first_seen":"2026-01-03T00:17:22.320683Z","last_seen":"2026-01-03T00:17:22.320683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b5.a85ff8ef.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b5.a85ff8ef.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"28929-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 281, 8-bit colormap, non-interlaced","md5":"a85ff8ef991c13f07fd36826982ea970","sha1":"2056225ae2898dfccbafcc261edfc433c485b187","sha256":"0352e17e026f5904fea943da4c39eed69ef4f44c0114dc3a917179a8e3318872","sha512":"236ad5e161ab15241e2184cc92b4411ddd90e499c2bca6681e79933dbc600f8d82a54d8dce811ee98131326b2bfb7077c744319bea30176ea6ef2ff3b8dcb446","ssdeep":"768:XCwVJ68p/4lAx7HL1qJCzmPrDvx/zRMSkYqqEacIpHxP:zVD4lAx7HwD5wYxjH","tlshash":"d6d2e1306a466276149c110db780159336d849bbe2c125b470a22bebfbe9cee8c8f427","first_seen":"2025-01-14T11:35:46.466395Z","last_seen":"2026-07-17T17:41:48.636851Z","times_seen":490,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B096TDZH68/61lMXyseVhS._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B096TDZH68/61lMXyseVhS._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 97211\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3CE63A83533660C4D\r\naccept-ranges: bytes\r\netag: \"776F70E46FEF536FE4FB9EC30EB2FA8F\"\r\nlast-modified: Thu, 06 Mar 2025 14:05:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4825423088930561686\r\nx-oss-storage-class: Standard\r\ncontent-md5: d29w5G/vU2/k+57DDrL6jw==\r\nx-oss-server-time: 33\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzVd%2BxX3zI5lEfuwXxBjLNzZiDAtKNXEHTfFbHYNEdVkhlOkyS%2BzMd23FSy1dojDCSakzrRj42kSK%2BAfG47j6cldrw1YKgjo3eCej5KG5wPyaj23sBY%2B2MEX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef50d4b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":97211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1204x1500, components 3","md5":"776f70e46fef536fe4fb9ec30eb2fa8f","sha1":"219d910b539dffec78ef618444bd903282cf2b52","sha256":"d70ecf2a3af7cd82380406b176c063dbd93d5b3ade4cf0d0db4da928c7cff869","sha512":"834270f311b6358c7963d13c982ee303e60d66cb5c6b20397df10eb50ba6003f5381ef85fb8cb0989f99acbec81dbb708d02dedf272c1f3a3993819c6142e7b9","ssdeep":"1536:tr/G9Ax6WaW+uzUrdjR4o6KlhCgBUtDK0HUgUmac9UfcT02wx9kfv+avQZ0Elclv:trFEFW+9BR4mhC4UtK0Himqcg2KQvZ4I","tlshash":"dc93029113a0c912d5240538b2c36608cec17ec5efaac1bbdca7bb5817a47c2fdda49d","first_seen":"2024-11-28T13:33:20.83748Z","last_seen":"2026-06-01T04:12:49.392343Z","times_seen":267,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b1.2b7d1c53.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b1.2b7d1c53.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"108602-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 620 x 688, 8-bit colormap, non-interlaced","md5":"2b7d1c53c0260d5626e9b521802a8644","sha1":"e4bb37c45c190d3d284c37579a2eb5c0ed7dfc10","sha256":"00b2bc580d934128371290b1acdc0906888c7ac7e81f2c7ec6592edbb0cda3bc","sha512":"3ca260ad50b6805f9bb58dc1a7b28b2e776db953a0a8850845b09672e36824e9cde4d8dfbeea436bee157adbf4e1d2ee6a05ba8343af25fcd64431af7a5cc64e","ssdeep":"3072:3mml/deUatxOOfRq++tCTlYP0+vqWFgHtLGUi:3mY/XaDX5qftH7CWqH6","tlshash":"e1b312bd1c26f2f78aed1412eb8b7491553ad6ceffb020ca0ab97b17223d116615035e","first_seen":"2025-01-14T11:35:46.468211Z","last_seen":"2026-07-31T22:21:48.334274Z","times_seen":524,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28164\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF794D103032072D70\r\naccept-ranges: bytes\r\netag: \"3FB702F913FF64C272D67742C3FADE6D\"\r\nlast-modified: Thu, 06 Mar 2025 05:53:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17123731182888595755\r\nx-oss-storage-class: Standard\r\ncontent-md5: P7cC+RP/ZMJy1ndCw/rebQ==\r\nx-oss-server-time: 2\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UlV5KPpCdg3P8fjEWh5ZQo37CgSueS0YCwLH8RyedL2BSJL3X%2Bw%2FvpMibi4a54Bgj20YLiYMDglFlqCjdlXHW0DrSby5zlg1O2MBmCNi0szUWNysbWNCuD8\"}]}\r\ncf-ray: 9b7e4ed978f00b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-12T05:09:18.271208Z","times_seen":9932,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/d95d5ab8-6544-4651-a5e7-8ea310a48be4.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/d95d5ab8-6544-4651-a5e7-8ea310a48be4.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 113864\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F2BC6A5B3039BA80A7\r\naccept-ranges: bytes\r\netag: \"8BDD993CA5B76C3E96257F2736A2C805\"\r\nlast-modified: Thu, 06 Mar 2025 11:40:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7834815289137128646\r\nx-oss-storage-class: Standard\r\ncontent-md5: i92ZPKW3bD6WJX8nNqLIBQ==\r\nx-oss-server-time: 220\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Wp%2Bek3yIlE25JGwuWi71z5eCmhzznjsnZNICeCkpCZulBD4OCLVfjJmbwHmtU7UTTum%2Fs1PsdQpl3e1vxhhp7vX%2BizLLOUSHd0p8Q9tZnW8ArfyDBki8UDa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8bcea56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":113864,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"8bdd993ca5b76c3e96257f2736a2c805","sha1":"b03474cccf6ac58c8421009770e3da8459731964","sha256":"e1b926ff8cea7e2ae811abdc5b0fc5b6422e67f8efaae1bbb7dcb638ec572406","sha512":"63f69a000b89684bb5d1fb0fb5ee0c8a82b6f1643882143278a28ebf5e1d8ac8bba640ac8d964945a66b71c18298d24be677e533bc4adbf3c15ffe6fb65c9ac7","ssdeep":"1536:/1pALL3fB5mImRITvOwjkKEbb9avyg1Bcgx2TymX7ZouoRbpD5F78sc1aro/MqbV:/1pUvBcY6wkVbBMyH9PoFpTlfro/xDGS","tlshash":"cab302154ba884f8d2bedeb0e375170e43ab88dc9359ad6e51c4ccacc4599a0fc548ef","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-01T04:12:49.409183Z","times_seen":269,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/ec54fbaa-091b-430b-b88c-ebc5ea77910e.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/ec54fbaa-091b-430b-b88c-ebc5ea77910e.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40531\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F28B904433353030A3\r\naccept-ranges: bytes\r\netag: \"3D457BD9F499369F087E21197E322E3F\"\r\nlast-modified: Sun, 02 Mar 2025 15:45:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7827765540148087324\r\nx-oss-storage-class: Standard\r\ncontent-md5: PUV72fSZNp8IfiEZfjIuPw==\r\nx-oss-server-time: 24\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvKtPqNUIET3AzVpkk4%2B6AbNm3jd3YqJP5CpnZv90TJ45PhXx9Ou6G2p0%2BuyQqgrlvCbp%2FHhQf9uaSSMdVRFF5ki7f5lyimde4m1CLZhYiwG8ejN0faLpJHh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee8dced56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 333x1001, components 3","md5":"3d457bd9f499369f087e21197e322e3f","sha1":"c4698aff3ce53a0c9d3c6b815ac16191fe69ccd1","sha256":"b453e1a99a10ea3a248a17693e22c6eafad86f68d094315bbfe7378d531f3ad4","sha512":"a916cdb81ae925536b8e91bb236c0b3f4566ff1ac6ee9890377fa7110d30defcd1f2d53747f59e9e139a4143e40d6533c0be05129a15f52a064673cf8dfe73e2","ssdeep":"768:1i0zmGcrcPQq3hzX12cLarS+QGLk2fw8yaL8ZmCYAfMeoARma8i8xjcRmHSx1Cd:0Qwwh3h7zLcvjLk2o9a4Z2vhAl58xgRE","tlshash":"1603f1aa14d03bf9c422a6322a5d0341d72f19a5d1e2d20abf9b943c3b8f547d44bdf2","first_seen":"2025-05-14T12:02:49.088581Z","last_seen":"2026-06-01T04:12:49.510874Z","times_seen":224,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5b85c39fb769eb183b6e5b8519ec3a00","sha1":"ae8be787b4c0500a7125bd129f660d18541d9da9","sha256":"ba3dc3cf6e634921eb9eed57e39334b4517b5b8b09327a935ff0d5546802c12f","sha512":"68d10a3cc895858d8bfabcd41db64466b2ce4907d7844dd0f69c6a4b83344aa7b3cda0ba2accbd5e81a925652b4a7dd2580316c1d0b30379f80a10ff687fd176","ssdeep":"","tlshash":"d2800000280e2c8b0803a088a88c3a0080ac22a308c0cb200e8cab3880ae2b22000830","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-08-12T05:09:18.389794Z","times_seen":3130,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B09WYQSFCW/61wZSQdL9YL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B09WYQSFCW/61wZSQdL9YL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66306\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F47CD23C363681D4A0\r\naccept-ranges: bytes\r\netag: \"846F52FF9AFAFEBCB004E4A6B9C5EF74\"\r\nlast-modified: Thu, 06 Mar 2025 06:48:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17303580306657761602\r\nx-oss-storage-class: Standard\r\ncontent-md5: hG9S/5r6/rywBOSmucXvdA==\r\nx-oss-server-time: 63\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2LUlhccsLkMdOCNH%2BU7bVRwT%2FhASAVgIuAcQCgOKw0x83AT5xlOC9SjuPqLmkBK28HwjklwWwTRnanx58%2BxDDEW82sH%2FePSb8ixCuUG3iD04CDuiEh8D5gb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef55d5556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66306,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x766, components 3","md5":"846f52ff9afafebcb004e4a6b9c5ef74","sha1":"43add0006c53914b5dc27d2d3bdf7b9ee457485d","sha256":"7304ab488f121487a3c36bb819bfb9f3978758df67f7c962dfdd1a37488f8939","sha512":"34d4954714256eed62f3e4ac9874bb54c67f6e89e31d98c7dc74b9d377d2112f5d3f041d5c38280a893b9ce5f23e5489185f8db3deffb43037106ff551f4bc5e","ssdeep":"1536:qF0iVpH6fgBXl5zSPLDdOtxOeN2vf74R1AXXEQub34IkIobc:qRVpH6IFl5zcixEvzGKnE934Iubc","tlshash":"905302ee6975e06ff10a08b1eb6b1f2e59d0b8e497545c3a33201828574eb7538981bf","first_seen":"2024-11-28T13:33:20.902501Z","last_seen":"2026-06-01T04:12:49.495688Z","times_seen":250,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/5401cfc5-9efa-413e-891d-59750bd58bcd.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/5401cfc5-9efa-413e-891d-59750bd58bcd.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29311\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3AB4B813738EDD0DE\r\naccept-ranges: bytes\r\netag: \"CA03A637E229A835F383703F44B30B55\"\r\nlast-modified: Wed, 05 Mar 2025 11:23:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7189632651065859375\r\nx-oss-storage-class: Standard\r\ncontent-md5: ygOmN+IpqDXzg3A/RLMLVQ==\r\nx-oss-server-time: 33\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuohSqFF1a39sdx55fR0jUidfAqrgNPyaxwDKq0DcuZC6czAs23GNqWkEVl1IfAt1hdvW4SQSTzQESF47v3JcdggXd%2FAFTVaRGF3MYvRaPWBqoPnCnvjAHIs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef59d5f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":29311,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 876x1080, components 3","md5":"ca03a637e229a835f383703f44b30b55","sha1":"a025c57b5dcce8ba7d4248241f31b82bde9e70ee","sha256":"e4c1a48cd109cf59b08586506390960733b588925efef7a4ce8f4970ee25fd79","sha512":"ea51643b92687081a7db8d4a414e811168041e9992b7a6c0fc233d308a8992a6db59fd7ad81ee84aae8e3b86174ae68fc060ae1447f9d2253d975981e16ead1d","ssdeep":"768:1V0d5VgqrXTt+ZdjU9E0fTfTDdINWnfha:XCoqjTt+Zu9E0fTLDmQn5a","tlshash":"65d2e1db23820d2be3120bb2c15f1434a6b3e5b05091971d61d0bf9fea7a163ce710e5","first_seen":"2025-04-01T12:05:27.381548Z","last_seen":"2026-06-01T04:12:49.459583Z","times_seen":224,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/chunk-10674d48.513d76f5.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/js/chunk-10674d48.513d76f5.js HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"14260-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14252), with no line terminators","md5":"f5a300d170e83923946b08060a852227","sha1":"fc706b8c3dcfec0cc8f2a4577a8140e67ae6428d","sha256":"3b66fe00afa2d6de74cc38d5fb54f36603e3871a3b58cd573c3e092b6315bde6","sha512":"eb911f875041fb7b7dc2a8cbd391e35d93796bb2172a8e67fe93f42fe8de00b5777fcfca90e634be2c0123bf100a088c389b26ee12e1ee874a5cf5e4ffdfdc2d","ssdeep":"192:m6Cje9JGsHRq+uCmYKDgHKxgXmunpFMOOGKkB9Oj6hBBg/BAAKsYllZ:ueHGsHRqALqCXmwpD86hX6569","tlshash":"6a5295a6c070a0fe4959c2b12045e5f0fb752a6ce112154afa7cec9b769d818333e77e","first_seen":"2025-10-04T09:42:35.222711Z","last_seen":"2026-07-17T17:41:48.641649Z","times_seen":393,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82737,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7956f64afe40b87be3fc8ad261c613c3","sha1":"76153530694357b94c431ec9b404c18c43c2fcad","sha256":"1f99ae96774db25395f228d7775556322a1c3ea4cf42b6d492975bb7ea2aed36","sha512":"5cac8aa99e584d093e615e4d8ee04960afae1c583a49968258b48f9c8f3fec25da1442d689654b7f66d3b07368677bad2e60faceb8c091118343ebbd9ed58ade","ssdeep":"1536:wXluQsQychat+so4sdO6+wt7hCXgWJtzpzLhYxKV:wXAQsQjhagF4sdO6z7hCXgetzpXWO","tlshash":"7183c463d7a891660f1800a50c633a5baddd838bdb234fa1d72c8f797d9c4f67a1909c","first_seen":"2026-01-03T00:17:22.328015Z","last_seen":"2026-01-03T06:39:42.770055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-08-12T05:09:18.379144Z","times_seen":6223,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27557\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFC390C3313585D4CD\r\naccept-ranges: bytes\r\netag: \"882ACB8A590986400F716B14CE87DBD7\"\r\nlast-modified: Wed, 05 Mar 2025 09:02:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 578722354819110674\r\nx-oss-storage-class: Standard\r\ncontent-md5: iCrLilkJhkAPcWsUzofb1w==\r\nx-oss-server-time: 16\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CL%2Fd%2FxEuOrLYRDpNOXhAWGNZPBi9e1oUQM%2F1rEvtD9Tzv%2FlcI%2F5uxWTiMHyasA0cSEvRm%2FZLOBjPx%2F2h7Q%2B8u0fcyp6sg8W8oZhjqIVWbagnjht1CVdtv6i1\"}]}\r\ncf-ray: 9b7e4ed978e30b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27557,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.247718Z","times_seen":10085,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B092JMK3XS/51dHARtym8S._AC_UL1332_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B092JMK3XS/51dHARtym8S._AC_UL1332_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39573\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F07CD23C323691D2A0\r\naccept-ranges: bytes\r\netag: \"670A368C4CCFF068182D5536545342D2\"\r\nlast-modified: Sun, 02 Mar 2025 19:19:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8851540056508740049\r\nx-oss-storage-class: Standard\r\ncontent-md5: Zwo2jEzP8GgYLVU2VFNC0g==\r\nx-oss-server-time: 59\r\nage: 526065\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h94wdix0au10Ig95F140LKyleh3EM6nNjJFj%2FxEKQ1d7bK6UemlxIcRc61PZI67ZdtgVq36%2F61u5YlPGLZVxuvu4FatYUV3obRr1RizgRvqdK7cxAsDACo28\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee74cd856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":39573,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 561x1332, components 3","md5":"670a368c4ccff068182d5536545342d2","sha1":"ec0966bf1864a0a54442b6d9df0bf090aaad4f81","sha256":"6d0c1fc38e5bd11b3729dbefc1c21ac3537ee13ace208e5c3764855b9e8357dd","sha512":"c93866e9e4d3b7e21e25d958b21a27df53ce80ba60e3b979cfd878e56dfdcb9bfdece9515ca7616115c40fc2471d5930e25fe1637e02f0754f034a36b1401ef3","ssdeep":"768:17cFmOLMtA+3O6I5qOrCs5B7A58q3IFC91ixcmSFqLaAiX76ptE:akOwtA+e6Ev5G5dX91WiOLE","tlshash":"4603f108ee04fda3dd98723885655af49d044abf9881f873fc150d8c1dc7aa66ef27a4","first_seen":"2025-05-14T12:02:49.158895Z","last_seen":"2026-01-17T18:52:08.653255Z","times_seen":174,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7290,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a8b5f6cc17e6ab874e92ca3108e867bb","sha1":"b8384899a948124e5e6a8004fbc7d8b5f55ee3b9","sha256":"ba8cb735f5f62ffc3fa7dee6605c152191e382d146675ce025dfd2e0427f0bcf","sha512":"4cfb61bc44981ecf57c4fc830ceec3027a3252b4daca54417d05c1ecf32245a9c79e4f31d6485b01b2d93a7f5acec6f8a2f60017da9a0d979dd41e700cc1f9cc","ssdeep":"192:5VyidzoHxICsG8TY1b1xyvxVRbQKDDCUK0NUbcxEYuI3Wnf7xG6/gvAxpHPUa4Co:5VlArCkl1EvPzmUKYTxEhf7s6/0Anzfw","tlshash":"48e1a7baffe83c9e8b8446d01a8714cffd90a16adb970ec500ed8f995956396053c378","first_seen":"2025-12-27T22:10:01.670635Z","last_seen":"2026-01-03T19:34:06.662127Z","times_seen":24,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/a4c5fb3e-b62d-4cbe-b099-a97fc6c3950d.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/a4c5fb3e-b62d-4cbe-b099-a97fc6c3950d.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 63970\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1C78BAF34305EA3DE\r\naccept-ranges: bytes\r\netag: \"4529BF3F260C5F3A94F947796F873A44\"\r\nlast-modified: Sat, 22 Mar 2025 13:39:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2583150502539167167\r\nx-oss-storage-class: Standard\r\ncontent-md5: RSm/PyYMXzqU+Ud5b4c6RA==\r\nx-oss-server-time: 56\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eKND0HwtD1QziEbgePt5c%2BFa6WTMFlVk7cOc2y60QHX%2B7EdoqM5%2BfLnCuSq0NUoyfSQqXXN9MZpVloReF%2FZ5fXvTSVK1MUTRXxC%2FF0%2FepULH%2FoIyhxIwUYh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee4ecaf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":63970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 828 x 656, 8-bit/color RGBA, non-interlaced","md5":"4529bf3f260c5f3a94f947796f873a44","sha1":"c587f1113d63fbf8350aaee4e0654de491b9552f","sha256":"063b78427466f115fbb0772eb2695c26373ab27491748d3dd58c9442ee092f3c","sha512":"6ce1febede94231343dd4181a96c93d28ac22723208032a3b01b67813b6a5a550e135929442d5b6633242a75763e469dafe41dcfdc795256870f653ddfb3504f","ssdeep":"1536:JZZZZZZZZZZZZZZZZZEXqqoAQr8EFvGhZZZZHke3/HVkSzcOVfUse5oPL:MXqqohr8e2ke3/HVkSgOVfUskoPL","tlshash":"f953bf905847f4d86f1e304ef8e36232752b8dd8082dbda61ee61d2ef5086c12d1af6d","first_seen":"2024-11-28T13:33:20.919821Z","last_seen":"2026-06-01T04:12:49.418302Z","times_seen":213,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B078HDKBP9/51GFbnKyX%252BL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B078HDKBP9/51GFbnKyX%252BL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29413\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1794D103432AA2E70\r\naccept-ranges: bytes\r\netag: \"FF60F022104EB768227711EEBBEFFCA3\"\r\nlast-modified: Tue, 04 Mar 2025 14:39:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7349945733907947742\r\nx-oss-storage-class: Standard\r\ncontent-md5: /2DwIhBOt2gidxHuu+/8ow==\r\nx-oss-server-time: 24\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTR2RbjbQqTeKjvuIBXSAWMutqXV6SmjRpvkLclBL3sciEk2xXmYewd5nCaLkI0BQZn40Cmj9XfrY2v4KX63Uthg6zfnQfBpETog8ibFGi7tXH6wi8T2Q6Ny\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee75cdb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":29413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x524, components 3","md5":"ff60f022104eb768227711eebbeffca3","sha1":"04126cd81bd99896327cbf5a885e97ff3dadccdd","sha256":"fe678116caea004e377da182bc1800dc8f6c7893aa3f7c982db87eadcaf4f4b2","sha512":"0fe6d24571bfbc5467bfecfa77e76444e8fa1f8358f4db1f8e46e4f978927bc9a076fd1fcc492dc9035d0e0388e79c498550976ba37803a310546731f583c9a2","ssdeep":"768:1hEd+NTrM1FZkiRzMnaapdkqH8MTwqqSrg1WTe11F/9b109FIoD:9N4bkiRIaapdkqH8Ywd71m+F10zIk","tlshash":"17d2e1fbc192b880ddff117e662cd621ae414f5d82e2b36d6284bf05e0460846d8bdf6","first_seen":"2025-05-14T12:02:49.139315Z","last_seen":"2026-06-01T04:12:49.504531Z","times_seen":224,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/avatar/2024-11-24/0e7a9408-e878-4112-bd38-eb77ad49b5a8.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /avatar/2024-11-24/0e7a9408-e878-4112-bd38-eb77ad49b5a8.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9351\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F17CD23C3932ECD2A0\r\naccept-ranges: bytes\r\netag: \"D93CF085E33148C53B55408C530D28C4\"\r\nlast-modified: Sat, 22 Mar 2025 13:49:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13678582180481607061\r\nx-oss-storage-class: Standard\r\ncontent-md5: 2TzwheMxSMU7VUCMUw0oxA==\r\nx-oss-server-time: 14\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHaLrrzAIHknney3foVCgA%2FXuLwRZczvst5hQoagqdSM2TtTFV3y6dP3GcMc0Ot5cR2547xoVMEeyTjlkqQMot69wwT8d0UvPNvzeJ1lwv97D6sIbWEzWXnP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee54cb556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x240, components 3","md5":"d93cf085e33148c53b55408c530d28c4","sha1":"f4e777356daa3602b0671456ef822a98b66b15da","sha256":"58a46f40e565397a4db576e773ce712414eca620a99393c8ad4b6d78a6653591","sha512":"b70d9b2d9d1aa0e1fbecc3d3bf56d8f387627ddb2117ea5f39d1ea2963978cf9c46080ef96ec72e3b7fb03076581420543c5d606536bce9eae91a72db5db0939","ssdeep":"192:mk00qFYgLHvba4Q30RclDy5rc4lFiQXTXbHlsSfjS:5eFYp30Rcl7QXTLH1jS","tlshash":"0a12bf0e771a3da5fb08b23b216b9e4023d746870c591714f8c15ced8be6037d5eb502","first_seen":"2024-11-28T13:33:20.923093Z","last_seen":"2026-06-01T04:12:49.391043Z","times_seen":213,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/css/chunk-0c8799c7.63f45ac6.css","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/css/chunk-0c8799c7.63f45ac6.css HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"36393-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36393,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36393), with no line terminators","md5":"8bc514137c812186750af18b3572dd81","sha1":"8188e3f4db7936cd84d222b8c97ee8431b2c33ed","sha256":"220f4e203274df70e23366921f46ee69d9e44fe703c7624bb1544aa2a21bb763","sha512":"b8463cbac1176b292f80cd0d33045042fb1fabb77ea5be1df51f1c14a4a893c55dbb3be71219eb6ca4f4719c343a8e25be735ce43c07bfd130083662eebb9dde","ssdeep":"768:uNfRhXQYMn8qeALfqMGCYD8yjSvQqFXQYFYnXQYNa3TXQYxAxN0K8:RTn8qeNikGcq","tlshash":"67f2a465ea64103db6f7c31e7ac09a8e3999d803d5630eacf7492a3dc5c76a3123538d","first_seen":"2025-11-22T13:30:31.056571Z","last_seen":"2026-07-17T17:41:48.666569Z","times_seen":311,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/tiktok-logo.5d29d620.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/tiktok-logo.5d29d620.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"9251-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9251,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d29d6206258b00671a9be83ea87f0f8","sha1":"28297cb32a2f17352df7ce48e2bbe4ca8a7a4cc1","sha256":"4d853abc9945eaff24db8ad09774de37b6dcbeb9981d014299afee9993f8637c","sha512":"0b13a9372fb5d75d32960254099d89bc1ce291f22f4e54372c143f4d09ff7881841fe3018dc889c2a554fccd5f98ef0de1c16bc5b2647dd2857dd7911b0c7f95","ssdeep":"192:n8Yq0zNr8ZOdDTwVYAfzIsV64RfORfxc4o+jqEo6EqSC:nPq0zNrRdDsiAx64R2RHo4SO","tlshash":"d01294c83b79a3f4a881e3f7d73660ecbd1f74e0a18540b4c3656d0a698606ecd999d1","first_seen":"2025-04-20T11:43:40.440579Z","last_seen":"2026-08-02T11:36:27.453893Z","times_seen":498,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17300\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFEE24003832C50446\r\naccept-ranges: bytes\r\netag: \"0527D1653D7AD2D9FCE0C6E3E6FF3F8D\"\r\nlast-modified: Thu, 06 Mar 2025 09:58:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2084547574050454431\r\nx-oss-storage-class: Standard\r\ncontent-md5: BSfRZT160tn84Mbj5v8/jQ==\r\nx-oss-server-time: 19\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DK%2Fx9JeIMq6INhbYXjg82Dp5nUlZqZPxAWkpOAKjUbV8jukYpD014B2gv8mJw8%2BsGBiC72eSlxpnyidftqkSq1b2H0kGH5Fg1us9KhQEUKZhAy8eJ2qAvDoP\"}]}\r\ncf-ray: 9b7e4ed978e70b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":17300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.319934Z","times_seen":9953,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/b6ada960-94a3-4545-a145-83c546fb63c0.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/b6ada960-94a3-4545-a145-83c546fb63c0.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 57163\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F14C8B37333065ED3C\r\naccept-ranges: bytes\r\netag: \"B377326ED9A97134A12DF9763B9EFACC\"\r\nlast-modified: Sat, 22 Mar 2025 13:47:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14609514437229062327\r\nx-oss-storage-class: Standard\r\ncontent-md5: s3cybtmpcTShLfl2O576zA==\r\nx-oss-server-time: 23\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLs9ATDKN%2BOZPi0WZoaZD7RFSAV2CmvWggEgLX495YmZ0FnnHY3BLbiyojfR8SSOlHEaL5mEEBR20cB8ezQzTbDUpo4ussTnqIBg%2Fr4V2lArmIOeeQTLuRfZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee57cbd56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 670, 8-bit/color RGBA, non-interlaced","md5":"b377326ed9a97134a12df9763b9efacc","sha1":"add6107d4f954283de7483f3ad1cf82d232d02c4","sha256":"3700db1071e78c289f9751bc2cd61dc0d35b19e3e9ae9079ca6486f777447418","sha512":"501d86a51c39c37732b2879a1ad17fd70ed0118a7669d6c0b7e72132fe2dafe17f4577fd670eb97edce24984668ac21053a50fc94baecad7cd101e2b0441e2b7","ssdeep":"768:lsN+EhYSOrAj9q71nONSV9VauzYUttJJyb3ccQWOZdjlX49SJAkbtaNZ:l3SOj1nOETVauzYYteLedjySnY","tlshash":"0343c0c52eb7e4890c8b7737e93045dd973a7b8c5ee9eb7d06b2380baa0ec755026050","first_seen":"2024-11-28T13:33:20.953397Z","last_seen":"2026-06-01T04:12:49.397721Z","times_seen":166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B08L1D5WVD/81ZlZbcL6sL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B08L1D5WVD/81ZlZbcL6sL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 333530\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F26AFD363339026BA4\r\naccept-ranges: bytes\r\netag: \"0D8D56EB4399783011093FD177A88DF6\"\r\nlast-modified: Tue, 04 Mar 2025 11:45:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5029431656090117999\r\nx-oss-storage-class: Standard\r\ncontent-md5: DY1W60OZeDARCT/Rd6iN9g==\r\nx-oss-server-time: 33\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8zEPyLDfyT4SugGWDZGB17OBaT7L4bz3UasS4%2B3yHSr6BTNfoKKrjp73tpSoaaoeyDseHgDeKjoJfLbqF5cUP8r2NaLl1nprHe0azGjdcR2SmSXTZ6Z048S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee86ce056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":333530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1254, components 3","md5":"0d8d56eb4399783011093fd177a88df6","sha1":"e5dfbd40f8de07c47adf1bd7f0eecd5bc238e25c","sha256":"22e3b1676d2803d4b09bdd67a3463bb66258537e53316d8743b294483e90995c","sha512":"4670022ed5bc10111946875a65fe98e7a40e98da6dbfef06902d9a2328a56844944fb4e35968e1af7c1a19ca12a9039d904f3f5ab82b042ced2697bf573c8c29","ssdeep":"6144:qQMaEFvt9kgvAml+hhl3C5NvZ6DvkzJPKas1IBD/CWv48O3:qPPBtKgZal3C5NvFP/sWBzrg8O3","tlshash":"0664234bf3163765c93aeaf870ca505f5243432478150ade1f8884e8ceaea5be71fe14","first_seen":"2024-11-28T13:33:20.809947Z","last_seen":"2026-06-01T04:12:49.408261Z","times_seen":250,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-08-12T05:09:18.379144Z","times_seen":6223,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22652\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF68F5793633E5B74B\r\naccept-ranges: bytes\r\netag: \"8D6323E7FDD7E06D404AF122B2C85F3F\"\r\nlast-modified: Thu, 06 Mar 2025 08:15:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5955858566509563138\r\nx-oss-storage-class: Standard\r\ncontent-md5: jWMj5/3X4G1ASvEisshfPw==\r\nx-oss-server-time: 11\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOWfCfdYXT8%2B448Jjab1GaB%2BPQjOvT4IiqxTNHGT%2FSfWkjLTk9C4uJpWPMgzeB5X9gN924ijSt6FyZxCD46v2nlVLAMeLBKS9nlmcBSfox9%2BE73deXZjhKNc\"}]}\r\ncf-ray: 9b7e4ed988fa0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":22652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-12T05:09:18.359475Z","times_seen":9872,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21173\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EF93A7E932306F7E51\r\naccept-ranges: bytes\r\netag: \"1E463B0BFC58CBE93DE38AD62F2AC7EE\"\r\nlast-modified: Mon, 03 Mar 2025 11:47:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11793735537717295025\r\nx-oss-storage-class: Standard\r\ncontent-md5: HkY7C/xYy+k944rWLyrH7g==\r\nx-oss-server-time: 1\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPxR6fVsYYaxLNcZ%2Fh5CD4%2Bn0NVsPuwc3znYRrfo4%2FQC7%2FdlWVb6QBHE%2BOw3TOQsurMqk9VUGO%2BbwzSvAz1a1vIsctEoTkcnOjB9QVEoAw4BRRGbxm6recwk\"}]}\r\ncf-ray: 9b7e4ed988fb0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-12T05:09:18.380468Z","times_seen":9499,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/cart-icon.5a38f867.svg","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/cart-icon.5a38f867.svg HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"1191-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a38f8670fc30481f726e876e5565822","sha1":"4f77b532d773da5c92c3c7f422295dff683fc333","sha256":"5bc7ebb0010656c541db3a1a4b02f5402be06b70f825c21512af050fe7cbbdbb","sha512":"3583b1b2c289504ca6010cb92174513bb290a415714c24130de6e62bb8ca20efd3ae1f74ab0dc53866e5e3769de54368fa5fd176d2d82729cf7018dad797726a","ssdeep":"","tlshash":"4621cbfb3312ad8a81a3c3c84350b558012af3d6f08b01c5bb951e25ac565fbf9bce61","first_seen":"2025-04-18T11:31:53.011472Z","last_seen":"2026-08-08T10:48:35.827657Z","times_seen":638,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b6.af3bc876.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b6.af3bc876.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"60627-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 281, 8-bit colormap, non-interlaced","md5":"af3bc8760695188ec0df10b06114738d","sha1":"c690f4a496919705f9c655a7dcdc7f5d2faba4b2","sha256":"1b201759a7883359d6fb38e4019a97f19467ab03847d261ca09fdd9b038411b1","sha512":"75acd6296b056983ec26f3b1e297d7a11cce120324db47a1bbc82edcd3681e53f791869594f3c71ad5550006f4647fb2d16bfa6278dbed369772841b6274c607","ssdeep":"1536:X+LkT3wZDHQCh3xUA5jVvvUuplIBVgxBd2Dn8H:X8kTQDwIB7+Amk/2De","tlshash":"8743028b40f1742d116beeae5ca04d241094636cbd16de3d9e8a07c14b4daaebcbf496","first_seen":"2025-01-14T11:35:46.365349Z","last_seen":"2026-07-17T17:41:48.675197Z","times_seen":487,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B07NYBCYSN/81woDriCuGL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B07NYBCYSN/81woDriCuGL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 156577\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AFAD5B39300198CF\r\naccept-ranges: bytes\r\netag: \"EC17581A9A69D9BD776F9B80FA7238B6\"\r\nlast-modified: Thu, 06 Mar 2025 11:51:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12894805659655694870\r\nx-oss-storage-class: Standard\r\ncontent-md5: 7BdYGppp2b13b5uA+nI4tg==\r\nx-oss-server-time: 22\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhqZhw9cX3mIdF7Th2ONiso5nfllRXXrXGVywK2SCr9rX4B78qDPf5RnpKPJtwSGdP31YJFSd7n6JvsBqLplwFfQTVzTiRySxnm9oSCyqiiIMCB98xLwP1OO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee71cd056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156577,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1007x1500, components 3","md5":"ec17581a9a69d9bd776f9b80fa7238b6","sha1":"00217290e9e59c2faa9493e9e18d5031eccd9cfd","sha256":"f8c450924b960b3b3274ffb49dd171252c5a529d34539997d6af2d0f4af3676b","sha512":"77f13b1cdb261a52fcb4ec17516d5ddb1a36286623c400cdfc7fb6aefcb86b4657b5b5d8c4093708b1e79dcc7dacfb92f0035304616e87adf3b7864087732ae4","ssdeep":"3072:uICI8C0r1jY0g89O8cefV8VoAAZMox8gyumD:uPI8A0g8MREVaoAAqox7yumD","tlshash":"21e31280735e1ae0f8784530ab5751279d478e2a34d24be9cf6af24f825689c99f1cf2","first_seen":"2025-05-14T12:02:49.2168Z","last_seen":"2026-06-01T04:12:49.395935Z","times_seen":225,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B06XH84FXX/81-tBzrbRdL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B06XH84FXX/81-tBzrbRdL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 172593\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F46AFD3634386D6CA4\r\naccept-ranges: bytes\r\netag: \"6ACD4E3B92CCE2FFBB9CE59DABD0B4B5\"\r\nlast-modified: Wed, 05 Mar 2025 11:01:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1179182785471443117\r\nx-oss-storage-class: Standard\r\ncontent-md5: as1OO5LM4v+7nOWdq9C0tQ==\r\nx-oss-server-time: 38\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trsGV78dT5j63ZzxxvA6fsE9e8MBPpbI5k6Q83A6G7cb8Lzx9JOxVBa6N0hGPoMe3ZoriW4nuV4qwByHAuVyvbc1czLfCcJU%2B%2F1n%2F56ywccAW6HXE6fnvTzG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef59d6056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":172593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1223x1500, components 3","md5":"6acd4e3b92cce2ffbb9ce59dabd0b4b5","sha1":"4a8ad0908f4771a24ecb9687419dca074bbc10e4","sha256":"d6f597e9cd075dafde4c9774eb1f35b4939056a4d756ccfe9f7edde1a816fe83","sha512":"bfd5461245699f0445c5c7711ce24153f4dcb7a377b6d5e3498a18f545c782573cb7f6a77e76c3fa053b56b492fc2e3b3f3c73cb0d45399cf2f1afd2efc8f252","ssdeep":"3072:4f6pZe9CpKG+a7TxOBxPOsKVnZpgp6JZrDo1Du9imckf4S/IYxEykxz39cA:HIc7EfP4ni6PA8im743YdkXx","tlshash":"20f323ad7b73501bd6e1a53cc97d61d8c336818b723f22450be12ea25a1b7bde27004e","first_seen":"2025-05-14T12:02:49.142635Z","last_seen":"2026-06-01T04:12:49.411031Z","times_seen":223,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/newOnlinechat!unread.action?lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: DYNAMIC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-12T05:09:18.263374Z","times_seen":8779,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com//72c70d40-fe0c-4f74-9f8b-b22198f5ec1d.png","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET //72c70d40-fe0c-4f74-9f8b-b22198f5ec1d.png HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 533984\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFAB6732363811BC5E\r\naccept-ranges: bytes\r\netag: \"5EC158CDBD4AF9131950FBFAB2E15CC9\"\r\nlast-modified: Fri, 29 Aug 2025 07:59:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8945292124909844972\r\nx-oss-storage-class: Standard\r\ncontent-md5: XsFYzb1K+RMZUPv6suFcyQ==\r\nx-oss-server-time: 34\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2nlDG4uzJtz8aQA8y4K3KM5u1kM4Rt%2FJ4nG19iEotj5amsbZQpy%2F16%2F3D0uKd49i4MJg3p5XldsTKvUBGBl61Cu8VlYSsbJjH19%2Begzh%2FrVfPQ0KgdPthbH\"}]}\r\ncf-ray: 9b7e4ed968d90b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":533984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1914 x 574, 8-bit/color RGBA, non-interlaced","md5":"5ec158cdbd4af9131950fbfab2e15cc9","sha1":"d450bd7807bd58e3b8dddad849ac55cec57bbbe3","sha256":"bcd3319234c7aacef991aebd45b68d5ebea86e7b4993a4ce3cd612e74f73f670","sha512":"b6581ca614437a35beb53294d834b5e8e6e369f4155413df0edf1faf55142784edf20f39fd7e9d80af0a86e5e4760a75e4e249117e99a4a9c5ee2215c06926f0","ssdeep":"12288:KgGgRefcP3VBUFEnNuT5DqNd+47Wndo36BBic0Fg6Gvai6n:KgCc3ViONu1147J367D56n","tlshash":"f4b4236b482f1de3ec29947b63dc945bb183a5e581e31796adf3b341128f83c3c26259","first_seen":"2025-09-11T08:44:21.738619Z","last_seen":"2026-07-17T17:41:48.606759Z","times_seen":431,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":80,"dns":27,"connect":2,"send":0,"wait":24,"receive":23,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26582\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFEE24003838D20446\r\naccept-ranges: bytes\r\netag: \"3CADF1789EB8F8D80A12E5AD0E19EA67\"\r\nlast-modified: Tue, 04 Mar 2025 03:15:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9646432687582283837\r\nx-oss-storage-class: Standard\r\ncontent-md5: PK3xeJ64+NgKEuWtDhnqZw==\r\nx-oss-server-time: 16\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFo538ZliVJXpfpetJxHcQpd%2Bw07nZcLaO7PzcroPnaPmpwAO7wpBkvwxOs%2B9X9eq9gXEwDAaPEAHDK4ituAY3X%2FBrSR%2Fix356K4LXfg1FoGpJ7srfvt7b%2BS\"}]}\r\ncf-ray: 9b7e4ed978eb0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-12T05:09:18.315934Z","times_seen":9925,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-24/329079a8-c5c3-4111-ba00-3f3f3baaea4a.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-24/329079a8-c5c3-4111-ba00-3f3f3baaea4a.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22106\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AFAD5B3732C897CF\r\naccept-ranges: bytes\r\netag: \"45B33141E8D13885A657257352BE966B\"\r\nlast-modified: Sat, 22 Mar 2025 13:40:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10187322863413944990\r\nx-oss-storage-class: Standard\r\ncontent-md5: RbMxQejROIWmVyVzUr6Waw==\r\nx-oss-server-time: 12\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qd6WpsXgUeZOwlW%2Fc8gIU3xMIt75O%2Fs%2BQ%2FCsqjH3IY%2BzquzPf2%2BRrecTX91tRu22q8E%2BygxyD55kKTRUf7kgte%2BfgeX8%2F7ZevY1q%2BMi4kTfqw4H%2FrO8xAkU%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee50cb256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 608x476, components 3","md5":"45b33141e8d13885a657257352be966b","sha1":"1bfb75b65c573dd29571a003a8b5efd0b1d0a5a4","sha256":"036e77f78587c0e04eeee22a4a85b87c4947471b3fd6c5561c1eb84fbd27cc50","sha512":"061301fea0de0a9e59f8f68479ccbf6320c1432f60c4357a6fd42e8fe96ae2b187985aa93c1f1ac6409f45b34dc759373993ecdce98543866092accb3391843b","ssdeep":"384:9wXj8VQdNSX1BNvYFkZFeUucWdLbscAS2VZSr5agKDklK7kMPodCwIl:CXj8VOkLNcaOxbsPur5a1DCK79PiIl","tlshash":"1fa2d0657f3d7738e0c748b8757f5340a3899a9680891011ff45dad6fc926d4892f1a0","first_seen":"2024-11-28T13:33:20.912816Z","last_seen":"2026-06-01T04:12:49.446462Z","times_seen":212,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-07/bff0b5c4-eeb2-482b-a245-af9bd63b8b01.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-07/bff0b5c4-eeb2-482b-a245-af9bd63b8b01.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100051\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1AB4B813739F2CFDE\r\naccept-ranges: bytes\r\netag: \"88E58CD2DF6891ECFC65DFD7D67DB606\"\r\nlast-modified: Tue, 04 Mar 2025 03:50:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8242367001828307207\r\nx-oss-storage-class: Standard\r\ncontent-md5: iOWM0t9okez8Zd/X1n22Bg==\r\nx-oss-server-time: 13\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zL9fo%2BLVbQD0gTBNmka%2BsFVFQrxgAqg2kK2yFWSnAxYd5%2BNR7aZkMbUJguFrpc%2BQHGRfeh9TyU1IxnM7y9r%2BPmyF%2Bc2um2z9Kyxx6uSRltgdsCTAh5l7gzUR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee76cdd56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100051,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 947x1500, components 3","md5":"88e58cd2df6891ecfc65dfd7d67db606","sha1":"1d1d9cfbd4e2099f1ffae131c058621f92397b28","sha256":"6d965657658b122c96fc74f2faff06f766d4a2f74cf5294791c8a562ed163577","sha512":"5a9aef9275af7885d5b302db71dca8f8ab374f791e590e9e25fce3fcc1d7acdf27cf0721e03a6488401c908d3742ec3a9016bcfb57d076b83ee5a0714b118fd0","ssdeep":"1536:nUKEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE8FShqYYG:pScYCtysD9AsVQ+YfOBtYg9O","tlshash":"37a3cfd2fff16a91f969c6b9f6287030d55f8a7d5a2e8fa321442f241704246e83b734","first_seen":"2025-05-14T12:02:49.229822Z","last_seen":"2026-06-01T04:12:49.485092Z","times_seen":352,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp13/B00QHCSXHW/51OJ4udE82L._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp13/B00QHCSXHW/51OJ4udE82L._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35374\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F393A7E93532388151\r\naccept-ranges: bytes\r\netag: \"810E7E8EC6B10DF86E7B1C3EF5EDED91\"\r\nlast-modified: Wed, 05 Mar 2025 01:55:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1289444500055294655\r\nx-oss-storage-class: Standard\r\ncontent-md5: gQ5+jsaxDfhuexw+9e3tkQ==\r\nx-oss-server-time: 23\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9uP48cQLeXS%2BA5DUpzg90VIWX1SEHM5KHY2HFPydwtNqDFBSfaTIIWjCuCaK3XzptrucFtmUvz0HV7U%2BJ81NpGjwT3whff%2BHFZx4AjUt5i0cQ5cT22WtNVe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef4fd4856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35374,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x659, components 3","md5":"810e7e8ec6b10df86e7b1c3ef5eded91","sha1":"d084d431c8c574a08dd0654d9bda0c1d895dae30","sha256":"a1fefaf38486dc98ac0bcfea7a581d7e69e8a0ed56c517cf2a049c392c3e5cd3","sha512":"cc88b0dca1fd4a9299684a90d88be9cf44fbf98fdbc9daefbf8202699670341aad781934b443be2bf1ba43c5a25d8e22090a0df20e2d3c3ddabd96712d3a4857","ssdeep":"768:1LAvLp9LSfuuzCSa9bwgyOHVNXUBaQ5jpW288SqyJo6XhhD:tC94uuzqWgyOHbkaQd/qJ3XvD","tlshash":"d0f2f16bf6e1a050cae1477c517a32b7af22ff16beca04457493fa3f68059505cb0ae1","first_seen":"2025-04-02T10:31:57.352274Z","last_seen":"2026-06-01T04:12:49.459047Z","times_seen":241,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/js/vendors~app.0ec2a4bb.js","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:28.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/js/vendors~app.0ec2a4bb.js HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:29 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3556854-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14507)","md5":"51842551146ed9efcc4430bc8e16ac3f","sha1":"6e1dbd79dc2f2c8da2d7faf8cd53b12474b4738d","sha256":"312d8217429701b680909f20452be5bb5ecdd142dac69edfed9f6d8e148b7272","sha512":"c3b8b3ba3080d0956b425f767c2f7b28a0127dfcf98e1fde4b60ba7cc717c523699dffeb6aec7ce5b86490c1161e449279784c50f716b489b6f49c45c2a62b8a","ssdeep":"12288:wYLFcwkbVvGphhAiKIgXwfWornIdZLRJaOLhbHwkZ5lvz1J2:wYLFNavEhNKVoWorIdZ9f2kZ55e","tlshash":"d93519cd7285b46253a370b4407f240bb33a2959680e8458f665e8da7c7da5e633bf3c","first_seen":"2025-08-05T12:58:47.874316Z","last_seen":"2026-07-17T17:41:48.627026Z","times_seen":352,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/fonts/element-icons.535877f5.woff","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x.pzfdyx.com/start/css/app.5b7e70ec.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-12T05:09:18.27424Z","times_seen":29406,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/selle/2024-11-23/9a5852b2-322d-467a-b244-2f23bc361eb6.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /selle/2024-11-23/9a5852b2-322d-467a-b244-2f23bc361eb6.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8023\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1794D103131802E70\r\naccept-ranges: bytes\r\netag: \"E1B2A734A557C1C86C7719FA79453E26\"\r\nlast-modified: Sat, 22 Mar 2025 13:44:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4832519333393427495\r\nx-oss-storage-class: Standard\r\ncontent-md5: 4bKnNKVXwchsdxn6eUU+Jg==\r\nx-oss-server-time: 62\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKPe5MlAh6mRz6L%2FHY%2B6Uey8p5DpRmraFSQTJ8Ycoah3JagZhprxS%2FJB9VkXVvJdBnK3IF6CNL1KcR0w%2F67Httrh%2BGXUqaISQscXeU2HerABraiIElKvjKrU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee57cbc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 225x225, components 3","md5":"e1b2a734a557c1c86c7719fa79453e26","sha1":"50cb8ce735e98655495c12fc662d1b83ff48bb30","sha256":"cdac312e629bb042912a834f21a5d02b74cc24ebd810dbd659b90c68e99b441a","sha512":"9a70ebaf71a9c05b09dba3a2e898530c2d95b0cbb235bca27bc214585744d21306771fd179fa0bc625733ee4bdae7066e8a28491e7bf20f6ac30b4afac8714ed","ssdeep":"192:dE6sFk8r10BAzq4Sj4otQwN0Z0WurlFRBjAyClCjL6J8w2NsftPD:dE6eH10BApZ8a0WuXTbClCX6JGCftb","tlshash":"34f1bed1f31ac102e4e63cb862527766319b74d11b0f85ca13b19a4882d6ca4afedbd2","first_seen":"2024-11-28T13:33:20.949298Z","last_seen":"2026-06-01T04:12:49.42942Z","times_seen":212,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125098,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"deb55d97f02182f5e78d9a55543e2df0","sha1":"88e47e734c9bce5205b0fb398c2cf90bec1e47b9","sha256":"647c338106ddb54395acd1c687a0b63c2621353bfc365b9a81eb16d045c7bada","sha512":"0001c08a0490b2a3931cfe8edeb1e18cd5d653867f8bf0d88bec19ff7c43be7b62e5fe3b2505cad5892fc0402b2a063dab87c28fda4483650523c1c8c1c0a783","ssdeep":"3072:UmrDdbdcgyO/ntnEgMZesaWBiZmeGdBhJc:fn+qpo8","tlshash":"96c3a622d798d26a1f2800a80c277a5b5ddc8287db734f95eb1c9f797d9c8f27a1904c","first_seen":"2026-01-03T00:17:22.349631Z","last_seen":"2026-01-03T00:17:22.349631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/test/2023-03-28/334bf02a-2fd0-43e3-8a08-0f195bbc814b.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:34.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /test/2023-03-28/334bf02a-2fd0-43e3-8a08-0f195bbc814b.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37028\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F1B1E823303847BE4C\r\naccept-ranges: bytes\r\netag: \"425F2D006A211A632AA9275F7AD30E9D\"\r\nlast-modified: Tue, 04 Mar 2025 19:20:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17034427549999572881\r\nx-oss-storage-class: Standard\r\ncontent-md5: Ql8tAGohGmMqqSdfetMOnQ==\r\nx-oss-server-time: 46\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F73lKyJdY0XqXoRNm7fzzUygDpFbKFE%2B6pcYVkSbryDV75h2lv%2FqGnmsAed0f8mqJlskOA5T3Y8qzencE2DDbXRePJ%2F%2BDxSH%2BfNDhqE%2Be8VbQ7y5YHxyVO%2F3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ee72cd356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":37028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 537x1500, components 3","md5":"425f2d006a211a632aa9275f7ad30e9d","sha1":"10fe059e36eec784ef6bbd076a7b49c4161dee01","sha256":"4f2c07cb3fa71b007494251f611a09318f2399f960ca1e0906ca2ea67767dfff","sha512":"035d2e5efd9b4d5003456e93f05b6722a031e3b664b41d49edb1efb32996608604a738e8c2e563160abe632dc4c6524602f2a818349602b21c9ec342dd3dc11e","ssdeep":"768:1waTyNderUNWhz1Zn2ZvrITCvJqW2TYro0Z3dM2iRhRlaHOpeUbf:SdLelz/CnJqtTls4PAOnbf","tlshash":"54f2f2bb6362e847de528ef29d637f107e3ee46d23815ed5c12c1a97e4dd9152cc8044","first_seen":"2025-05-14T12:02:49.130107Z","last_seen":"2026-06-01T04:12:49.420008Z","times_seen":234,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/pc/gp11245/B09YHBCPYX/71VB7EYbNWL._AC_UL1500_.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:36.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /pc/gp11245/B09YHBCPYX/71VB7EYbNWL._AC_UL1500_.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 00:16:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 160668\r\npriority: u=4,i=?0\r\nx-oss-request-id: 695058F3AB6732323008BF5E\r\naccept-ranges: bytes\r\netag: \"C0B6B26F56C173B3256A4B3FF322062B\"\r\nlast-modified: Mon, 03 Mar 2025 22:49:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10822676209904924308\r\nx-oss-storage-class: Standard\r\ncontent-md5: wLayb1bBc7Mlaks/8yIGKw==\r\nx-oss-server-time: 29\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAFzdfGkPgaHvM42lAi7vQGoZKc6OPrtQPtQZNm8x2kX0BkYJKwMxQzLNiuz04ywZGCYMXQfmCA1fMh0UfScDQoCN3Sjbs5eaYtolIaxUlFhMWOcFXFpy5uw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b7e4ef4dd4756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":160668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1383x1500, components 3","md5":"c0b6b26f56c173b3256a4b3ff322062b","sha1":"7a910646a1bc5feb0da4960abc0cf9d388bc9c0a","sha256":"188634b290965ea5b638e6a8836a2d2da690f517c6dac2a7f9adbfe7d9887de2","sha512":"0fdff8265416458da0323cd0ca9e8b27e104bb460fbae831aeb5bcc44866e933aac6612c688aa2c4817ea1e1bcc1bf11278e072f603a8ba6f58bfbdb983ab28c","ssdeep":"3072:5jtzh0TgGhjQ8BIz2Dai1nGUSB1SdRRygYe8CC33ezxeLwY4:PqTlk2GpBsEQ8C+UeLwY4","tlshash":"b8f3128afbea7491fae9c8f014d5e7005a511eb7f53a929ea2245c43c430f83f416b5a","first_seen":"2025-08-09T13:02:02.905038Z","last_seen":"2026-06-01T04:12:49.473854Z","times_seen":174,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/favicon.ico","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-language: en\r\nx-cache: DYNAMIC\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":762,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (758), with no line terminators","md5":"62c861c762924495b3f843dae866b6e2","sha1":"fb139972dd4259e454d982cfebcacfc42d82f38e","sha256":"5ed510c9e08976776e4fab1f1fae34bd6fb21adb173fbd147008e55148a60766","sha512":"aecdb7cf25ab0925b078bc6e8aa3a1ac99055be5c43b677c29bcb3fa6944220158bfc5bc4a2d781782d11331a307e081b64bb208b9adab05fc46ec12cbf21d52","ssdeep":"","tlshash":"4101203ec20a1117bcb6087b36513ea83858c88396760734e85889f8d6864f8976178c","first_seen":"2023-09-11T20:29:55Z","last_seen":"2026-07-19T23:49:52.002666Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/syspara!getSyspara.action?code=platform_icon,platform_logo,platform_name,verification_login_sliding,verification_areacode,prefix_money,recharge_method,loan_application\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=platform_icon,platform_logo,platform_name,verification_login_sliding,verification_areacode,prefix_money,recharge_method,loan_application\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"40a671a53165eb56fe01d396b473d0b4","sha1":"7e1b9a753c7dbc4b9f3239445e6edc5d4368581e","sha256":"b461416772921d820b0d7211b3fd0d29da3260b12e9f4c8e0666b01e8faa6ca4","sha512":"b2d30d234463a180aa7e2c4c219ebded782df671c42182d34b6e5017ecebf20ad1fd8580608033019c5b6029d92bcc35e1e34f20e75ae0aff1f6cbfdf5485122","ssdeep":"","tlshash":"49d0a7873a3f4c169b77d767c4ca5845433d03ef0c83ce5c1c515eb001a82a5b701515","first_seen":"2025-08-09T13:02:03.115317Z","last_seen":"2026-06-01T04:12:49.496502Z","times_seen":251,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/start/img/home_b2.13b79cd1.png","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"GET /start/img/home_b2.13b79cd1.png HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"22102-1765890387000\"\r\nlast-modified: Tue, 16 Dec 2025 13:06:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 425 x 337, 8-bit colormap, non-interlaced","md5":"13b79cd132113b166084cec95784e576","sha1":"a56b0c0e3543c29e91a8b11465b90b1387b935a1","sha256":"3bdedcf8dbff0f0dbe97b6bc4a9768aa76d22b577e32edda28eb7252100d0394","sha512":"1eb9da7a6c2b2d150ec7383297035c99c851eb3c5475723b1c866da7eeb37b6fced54b3b2b773f9d48e4cb899fe2055176f291fcef03d26fa080cf3e9747461e","ssdeep":"384:Hd4iONyHPtyt0rHOxQ0xN/UMcutwyUSj7hM4lTrNA8C:HSiXvCGOnpjtM6y8C","tlshash":"7ea2e1fd710aed30a3efb9112f6b80b8a9258c7a0118f6c4e1ce5d499176fb0445bc9b","first_seen":"2025-01-14T11:35:46.488006Z","last_seen":"2026-07-31T22:21:48.351081Z","times_seen":526,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x.pzfdyx.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"x.pzfdyx.com","domain":"pzfdyx.com","tld":"com"},"ip":{"addr":"154.82.90.56","port":443,"asn":399077,"as":"TERAEXCH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:31.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.komanche.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 13:47:32 GMT","end":"Wed, 25 Mar 2026 13:47:31 GMT"},"fingerprint":{"sha1":"57:F0:D0:D2:D3:83:DC:3D:F9:3A:FA:68:9B:5F:48:43:BA:35:31:58","sha256":"45:65:67:AF:45:E0:A3:5F:8C:54:1B:97:E4:24:0C:A9:EE:89:DF:EA:EB:05:38:03:F2:BB:80:33:05:AE:CF:AF"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: x.pzfdyx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://x.pzfdyx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"603742aa50c2ac76be15f8514802c950","sha1":"0cf48af441fedb1cc44d8e18104a7e616dfe0aa7","sha256":"7eaca6fe2cb4162420d6dbf2e4a835ae3f69ab61244e71c4d0dd1a05b1782cd1","sha512":"4d269237686bc9b0af7c9845e9baa873c1748a7289ecc8c37fa0ef583ac10bee385b7b5a0f549b90144405a6342b0c8b11bf8e2de686c8bbc8d73cc975f5e32b","ssdeep":"","tlshash":"3011ef5b23c890a59904b7c38e8a3c82d78da34fcc94898ec64ddf2d46a56b8151d372","first_seen":"2025-12-27T22:10:01.634554Z","last_seen":"2026-01-17T18:52:08.643869Z","times_seen":28,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Phishing Block","trigger":"x.pzfdyx.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"x.pzfdyx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iamge.ustiktok-wholesale.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"iamge.ustiktok-wholesale.com","domain":"ustiktok-wholesale.com","tld":"com"},"ip":{"addr":"104.21.16.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x.pzfdyx.com/","date":"2026-01-03T00:16:32.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustiktok-wholesale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:08:11 GMT","end":"Sun, 15 Mar 2026 14:06:59 GMT"},"fingerprint":{"sha1":"70:11:05:D7:C7:74:0B:50:AA:6F:FA:F9:73:4E:41:40:22:F7:E2:85","sha256":"A5:E2:B5:9C:B6:6B:21:D1:09:B1:4F:FB:F9:AC:CA:AF:39:2F:C6:AA:0D:76:A8:EF:0A:A5:2E:E8:8E:E3:9D:5A"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: iamge.ustiktok-wholesale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 00:16:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66319\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 695058EFC390C331369FD4CD\r\naccept-ranges: bytes\r\netag: \"DBB5460537325E381060D6A696BDABBA\"\r\nlast-modified: Thu, 06 Mar 2025 06:28:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17417380856598428845\r\nx-oss-storage-class: Standard\r\ncontent-md5: 27VGBTcyXjgQYNamlr2rug==\r\nx-oss-server-time: 10\r\nage: 526064\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4uTsqCuRmELCw4iRF0cV7zEt%2BnXjoz%2FNt0iff7hFA0Vp51EF3%2Bq1u6%2FtH35pRtIOE7WW3vIZycGlkjL0ojC4pyNJILZxdoTAxS4enRGxaNfFNnaee%2F4IZEuF\"}]}\r\ncf-ray: 9b7e4ed978f30b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-12T05:09:18.377043Z","times_seen":9939,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"iamge.ustiktok-wholesale.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}